33f8e30f37ebc5da2d6d28ccfac737e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33f8e30f37ebc5da2d6d28ccfac737e5_JaffaCakes118
Size

85KB
MD5

33f8e30f37ebc5da2d6d28ccfac737e5
SHA1

7e0b1a74003c502cf6f27c83fbebaa1ee2ff55e8
SHA256

5436f7d70ca5ea2c41e88b0e42b2c369cba8d014446cf3e41503c475fbaabe70
SHA512

d1d73f3e1e4cf910ab84c2d3f3162cc3161daa8221bebc3dec89abacd33bbd2158e1009fd6a55aa3b120ca1ef52fcd9f7f5d29c3c8ecda3ef070254950bfd641
SSDEEP

1536:84Xotu5mVJ1ledvOciQkFQ8rJogQF7ZB8ofMpVA3VXIwZWnON30jiSFjeu:WAmVJjed2wv8egeB81pYMnO2uSFj9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33f8e30f37ebc5da2d6d28ccfac737e5_JaffaCakes118

Files

33f8e30f37ebc5da2d6d28ccfac737e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

faefa9a717abf3ce93a1bb3fb0b49fab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapCreate
Sleep
FindAtomA
GetACP
FreeEnvironmentStringsA
GetCalendarInfoA
FindClose
GetModuleHandleA
LocalLock
CloseHandle
LoadLibraryExA
GlobalUnlock
CreateFileMappingA
TlsGetValue
WaitForMultipleObjects
CreateFileA
LocalFree
GetConsoleAliasW
GetConsoleCP
GetLastError

user32

DefWindowProcW
FillRect
CheckRadioButton
CopyRect
SetFocus
IsWindow
DrawEdge
GetIconInfo
GetDC
DispatchMessageA
DrawTextA
CallWindowProcA
GetDlgItem
MessageBoxA

setupapi

SetupCloseInfFile
CMP_Report_LogOn
CM_Add_IDA
CM_Add_Range
SetupCloseLog

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ