33d7f2d0e6d944eda2267fe08faa7ca7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33d7f2d0e6d944eda2267fe08faa7ca7_JaffaCakes118
Size

190KB
MD5

33d7f2d0e6d944eda2267fe08faa7ca7
SHA1

396a56cfaad0dd2b410d9e8e09f8d99f6c3a4b6a
SHA256

c84b220d6bd891b2edaa80c9af3035e17d8438d9cb14e1677f4d7b979b13f2c6
SHA512

21b1d0ce054b0a915f0746dd19964b72067ae3538cbdb1e3e1722e0cf3372bb2f5522e7c9d89e5d24f5a478b99eafef7a86b071ec3402e7d51138b3cacbf62f3
SSDEEP

3072:QLtBEtxTBIEZSian1dntU7HOJ8kaqVPp7cZ15tTs6ZNAtW9KKsFDLHfyZJdDKBUU:QLtBEKkSiInuHqVp4tTs6XAQ9mFDLHfC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33d7f2d0e6d944eda2267fe08faa7ca7_JaffaCakes118

Files

33d7f2d0e6d944eda2267fe08faa7ca7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46e12d7a9f1ece2bb4adfceaee87eb3f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomW
GlobalFindAtomA
GetWriteWatch
FindFirstVolumeW
BuildCommDCBW
BindIoCompletionCallback
HeapLock
DisconnectNamedPipe
Heap32First
CreateHardLinkA
GlobalSize
GetVolumeInformationW
_lopen
GetBinaryType
ReadDirectoryChangesW
EnumDateFormatsA

user32

EnumDisplayDevicesW

Sections

CODE
Size: 9KB - Virtual size: 808KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 177KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pack32
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ