33caa0dcaf65142a666fec045f8a480e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33caa0dcaf65142a666fec045f8a480e_JaffaCakes118
Size

24KB
MD5

33caa0dcaf65142a666fec045f8a480e
SHA1

4bdf193cdc035e3444fd80eb7f544844b6abfd6f
SHA256

4c45da36f2c453a03b61fff560c84bec8d609a19484f23b5e5f7ef434830e6d3
SHA512

cae3c3781f688ccbfae4b166a0b11693ff1065de6d3c2255c72d4aa690e6d13466fed35d6a8e4d2e3e74c6ec0c5db6dcf9697c246d649757b414269396d6abb9
SSDEEP

192:LBlljyBLnDRqAJdADNKoGNwdZlnB+P1oyAK1PiKQ9Z1:Fcq1fGqnG1La

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33caa0dcaf65142a666fec045f8a480e_JaffaCakes118

Files

33caa0dcaf65142a666fec045f8a480e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09c0971d73ee47b8c7bfa6b48a866590

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
FreeLibrary
CloseHandle
CreateProcessA
WriteFile
CreateFileA
GetLongPathNameA
GetTempPathA
GetModuleHandleA
GetStartupInfoA

msvcrt

rand
srand
time
__CxxFrameHandler
_except_handler3
??3@YAXPAX@Z
sprintf
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
atol
??2@YAPAXI@Z
_itoa

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 926B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ