33e3b1e811288754e04688b9c6294505_JaffaCakes118 | Triage

Sharing

General

Target

33e3b1e811288754e04688b9c6294505_JaffaCakes118
Size

46KB
MD5

33e3b1e811288754e04688b9c6294505
SHA1

8df780df3d7793328dc30b719b230ef7b1f4d5d2
SHA256

d8fd382d72be4c5f94fc3bc3a35aeb49c8f9899cd9d12e5cbef5954b61fc9b9e
SHA512

cd83316a2c54712902f371d5a5f5472711bb2d0d6c0a66d1b3091d08f634870162957954e8337f2a89f6f19adb822325e491da14cd3f43e39962355ad450dc2d
SSDEEP

768:3q1x1JOBCeArPA1B7MUW9GUJQZrevbB6wt39:3ex1ReA7A1R09htN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33e3b1e811288754e04688b9c6294505_JaffaCakes118

Files

33e3b1e811288754e04688b9c6294505_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cba6e04d5bb4bd8068b2de7c30751477

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
GetLastError
RaiseException
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA

msvcrt

_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__getmainargs
__set_app_type
_except_handler3
_controlfp
_acmdln
exit
_XcptFilter
_exit
srand
rand
sprintf
__p__fmode

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ