33cadfa4621014026e04d73db74efc0e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33cadfa4621014026e04d73db74efc0e_JaffaCakes118
Size

289KB
MD5

33cadfa4621014026e04d73db74efc0e
SHA1

40428dd0c817eec103f853599dfe358b53f52c87
SHA256

4f4b760b0472e298f05a3c5dbb722ff439a698937738f5d976f8351c9565e711
SHA512

c22d80fcbb0bfb6d753da65e36aa4dfb32aa5d39f4896f5c6fb4ea945cfe0b879f7a948d77b65cb77b8a54eb1084414f629cb50948b65420d7ab0b43e15b6ece
SSDEEP

6144:5j0NRUgd19XbwT5JExEz/Yj647PWx4zoiFv3SQ:5j0NRTNbW52CO7g4zvFf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33cadfa4621014026e04d73db74efc0e_JaffaCakes118

Files

33cadfa4621014026e04d73db74efc0e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 283KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ