33e375ad39187198b6ccc8e1d48ca4b1_JaffaCakes118 | Triage

Sharing

General

Target

33e375ad39187198b6ccc8e1d48ca4b1_JaffaCakes118
Size

181KB
MD5

33e375ad39187198b6ccc8e1d48ca4b1
SHA1

817e59d3c67472464a2e8936f4f38cc4d63f68e9
SHA256

674032a99ef792bc548ba7ee4f13ceebea9c82b7eead21c874627340cdf2fec0
SHA512

bf37f68fffdc09f5af9248bbdac0a78491b9797924f495da94d81899a6852ca0704261a9ab2861d2c0ab8cf7dd3d7fb676ba4ad047b4b8384d702729da98faac
SSDEEP

3072:aH2bFJIhtrAi3yixSwm/ePWBlisSHy1GFrZrPxeS2a/gcslKNFxZmt90wFKTxRcc:aHUfIhtrxSwAePWBVoZrozaImxZ9FTxR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33e375ad39187198b6ccc8e1d48ca4b1_JaffaCakes118

Files

33e375ad39187198b6ccc8e1d48ca4b1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c98f2424812961f86cdc32a36b0c4159

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetFontData

kernel32

GetProcessHeap

user32

GetForegroundWindow
IsCharUpperW
IsCharLowerA

Exports

Exports

?FounderNormal@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalLock@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalPointer@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalSpeed@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalWeight@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalXern@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalityCover@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?NormalityQuan@444GPAUHINSTANCE__@@U_COMMPROP@@/J
?ReactNormal@444GPAUHINSTANCE__@@U_COMMPROP@@/J

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 333KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.itext
Size: 1024B - Virtual size: 631B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ