33f8c5060f6839073f73a962049a259a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33f8c5060f6839073f73a962049a259a_JaffaCakes118
Size

127KB
MD5

33f8c5060f6839073f73a962049a259a
SHA1

62074165774904e8adad461bf51e94a8275ea4d0
SHA256

e439bf8ecb4c46dd4a59baf98b6545965f43d80871eb5b17b200341a1c7a84aa
SHA512

f432ca72caa2ca157fca2c2fd5fcf4820e72ee09ddee32a1e5ba06a1db1d7c31b3c046aeda058bc044bd9df574843a02df26eb6b2c74dbd8caab03f3aef1f8af
SSDEEP

3072:ShxFfGoo/AOq2UKEUSEKRSH5qo7ph2lWQu:ShxFuouAuUSKAEmh2E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33f8c5060f6839073f73a962049a259a_JaffaCakes118

Files

33f8c5060f6839073f73a962049a259a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a1138d94b54c5a16e336f57dc47a7ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
GetProcAddress
LoadLibraryA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsdat
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE