33e34345c78fd86388d7514a834c1d6b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33e34345c78fd86388d7514a834c1d6b_JaffaCakes118
Size

355KB
MD5

33e34345c78fd86388d7514a834c1d6b
SHA1

bf3d019368338fb78fcc1b3ed7d53565d8901dc3
SHA256

9456b38d23d3a0d08ddd28f473d6ea93b7000e6ecba07bcc9aa0f73cacbdc148
SHA512

ff883ced1dc9b0231cfcf088da52ca528bb0a9bff7a63407530bd4a4aa3c6aae2fa0d70b6dff0656757f279b0c3f40256eeb915639c2dfdc6d98d636b5438ed9
SSDEEP

6144:0q0M8OQAO5WSocVxgGcj/Gcof3dHS9CNL0QPx5a92gQ+yIoX1z:t0IEScVfPdPQ9qX22f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33e34345c78fd86388d7514a834c1d6b_JaffaCakes118

Files

33e34345c78fd86388d7514a834c1d6b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

47606dbbcd183078a3bc974615fed850

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDoubleClickTime

shell32

SHGetSpecialFolderPathA
ShellExecuteA

shlwapi

StrStrA
StrChrIA

kernel32

GetModuleHandleA
lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
RtlZeroMemory
LockResource
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeLibrary
GetCurrentDirectoryA
GetModuleFileNameA
LoadResource
GetProcAddress
GetTickCount
LoadLibraryA

urlmon

IsValidURL

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 820B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 340KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE