33e619ca9be2a54aa38b2233ccb1a02a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33e619ca9be2a54aa38b2233ccb1a02a_JaffaCakes118
Size

80KB
MD5

33e619ca9be2a54aa38b2233ccb1a02a
SHA1

42e9d7d6370a9d960776dd4143568acc8ba319a4
SHA256

e47edea88b5328dd05cba813cf1632db6137de31cd60429fc4c28f9f388ddf54
SHA512

685f84436a08c6cf4039a9bf3abc51f4364804ed1737c866e3335c9165743f166c33ed747b79caf87e1861692ae352c884c17cdfd0756eea476bb571a3429579
SSDEEP

1536:no9QgBhBnSo5QIv0nUBZs4qq2Xc41+Zj9mPuxO+CrhnpPbGnQMoc4sj:8QgBTSo5QIv094gM4UU+yRpFc4s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33e619ca9be2a54aa38b2233ccb1a02a_JaffaCakes118

Files

33e619ca9be2a54aa38b2233ccb1a02a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

79122d75c9113f215cd92d47fa1b3d52

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

printf
exit
sin
__getmainargs
_except_handler3
__set_app_type
_exit
fopen
fseek
_acmdln
fwrite
__setusermatherr
strlen
fclose
fread
_adjust_fdiv
_XcptFilter
free
malloc
strcmp
_initterm
_onexit

kernel32

GetModuleHandleW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ