33e9a1c0bc31a837b3e0383ab7fbb645_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33e9a1c0bc31a837b3e0383ab7fbb645_JaffaCakes118
Size

37KB
MD5

33e9a1c0bc31a837b3e0383ab7fbb645
SHA1

dd7c8a0cb578c1d733b5c83b3a57e7ffdcc153db
SHA256

0a0227171a325c0496d39cc95c810b90f81ccdb6b619155e5552683009032fc9
SHA512

6b7855097adf1653859d72ab4421961c4ec3cdf20237c7428a61a751ed90d937f978b2c7507bf71f0ce5f43326bf7d0c6facbada1d9b784bdfa18102bb71c719
SSDEEP

768:edIZ/alwuAknNWuCMQpb0ruFm1YqTrmHwbLyMyz:edILlknNU4rOobbLynz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33e9a1c0bc31a837b3e0383ab7fbb645_JaffaCakes118

Files

33e9a1c0bc31a837b3e0383ab7fbb645_JaffaCakes118
.exe windows:4 windows x86 arch:x86

23f6e4ee8da20bb24cb1f94800599914

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

user32

FlashWindow
SetTimer
wsprintfA
MessageBoxA

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ