33f40496ed2597a6597ea366bd07fc14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33f40496ed2597a6597ea366bd07fc14_JaffaCakes118
Size

1.9MB
MD5

33f40496ed2597a6597ea366bd07fc14
SHA1

7655d116096b710b5121b99adb1ec02ab74f2e21
SHA256

35c2c4c6387c19fddcee987b33816a473099fae2ed49a56ae4266d572ebadf5c
SHA512

1bf62933f8bee195ed95ac9ba139b1b7b57125f38ae3e3319cbd829c4c6ecc8a3f1c6f9770ed97c67f1a653eedd56a1ce405adda2bde1c106e0ecc846cb7b179
SSDEEP

49152:WRY1sC+G3hqbgdyadOFnsvSn9TCUXWVmGqy1uy:WRIh+2hq8dyadOCvS3XWR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33f40496ed2597a6597ea366bd07fc14_JaffaCakes118

Files

33f40496ed2597a6597ea366bd07fc14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a13ee2bd542e30b8d805240c3433d2bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32.dll.

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32.dll.

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ