33d3387a9d7c5c7343a84ca3e90beeef_JaffaCakes118 | Triage

Sharing

General

Target

33d3387a9d7c5c7343a84ca3e90beeef_JaffaCakes118
Size

312KB
MD5

33d3387a9d7c5c7343a84ca3e90beeef
SHA1

34cd468f70efcfb634234dc0fa9604b9f8e8fd72
SHA256

e066c9e8a76dba2a9f4ada388fe05e1f7b1f4953b2d75e5bbe15a8c08456f5fe
SHA512

91ea5413b654118ab47cddef0a1b13ad318cc5d34367f4172edae6d2c5bbecfe39e3806d03a186332dacf0bf9e846a022d880d8d84fd7173a9d277153160c448
SSDEEP

6144:gUqh/znpBZnBe8E0V6KlGvOMRaqxuxmkqbwuUrY:grpfns8/V6WTAaqx9bw3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33d3387a9d7c5c7343a84ca3e90beeef_JaffaCakes118

Files

33d3387a9d7c5c7343a84ca3e90beeef_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9a40ac01b26174101c315a0e1a536538

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
TerminateThread
GetLastError
CloseHandle
GetProcAddress
GetFileSize
CreateFileA
VirtualFree
VirtualAlloc

ole32

CoUninitialize

netapi32

NetDfsRemoveStdRoot

avifil32

AVISaveOptionsFree

Sections

.text
Size: 4KB - Virtual size: 964B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 510KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ