33e0d10ed78082113c4b0471e8eda70b_JaffaCakes118 | Triage

Sharing

General

Target

33e0d10ed78082113c4b0471e8eda70b_JaffaCakes118
Size

437KB
MD5

33e0d10ed78082113c4b0471e8eda70b
SHA1

04bc9f554f183596a8086d755c618b84fc83b5cd
SHA256

438a98050f85ae460f8828dbb79367ca6e05acaf42ee5ef7ec3624339b1e042e
SHA512

bac9a2f2fa9745cae96a5b07ab7be43248157cf3346cf80c749bdc99b78f0271a3f9df852275c44f8a49dd2fe7825249bb4a8c8b862c757d4713077fc49a3923
SSDEEP

6144:r9yZDxwrAZjHx5585ptrxjBIdhQM5OcZGiysMOYf2ij0sh8CIpz7IG:hrAZzx/QrUrQKOcpcwsaqG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33e0d10ed78082113c4b0471e8eda70b_JaffaCakes118

Files

33e0d10ed78082113c4b0471e8eda70b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pdbf77x5
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

hnj56n4l
Size: 259KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

y7g8h3h4
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ