33fb22f635345e9dfb7794f3c24cee50_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

33fb22f635345e9dfb7794f3c24cee50_JaffaCakes118
Size

104KB
MD5

33fb22f635345e9dfb7794f3c24cee50
SHA1

dbbddf17c4c7ae9aed80e73d5168430653bdb09a
SHA256

1d613ee78d645352cc79ca9531e38b41d21c1dff7606b85549e9189e5ccf31d9
SHA512

d714173b20260ab38c5c0e17d376658d308a873042d01bda1c7c6831d51c78581d150f1caddeed5b147f28ffdf9a225e3096251384d113be0f15ee52fa2af422
SSDEEP

1536:Hn/oYXOMXO3TWgGaiqqXnH2NPIad4Ny6XFpUhUO5ikXKvWFLo:H/o1GBqq3H2Nws4k6XvUhUDKU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33fb22f635345e9dfb7794f3c24cee50_JaffaCakes118

Files

33fb22f635345e9dfb7794f3c24cee50_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d1b1d470695815e5d2859c5f33b4954e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
FindFirstFileA
FindClose
FindNextFileA
FreeLibrary
HeapFree
ExitProcess
HeapReAlloc
HeapAlloc
Sleep
lstrcpyA
GetProcessHeap
GetProcAddress
LoadLibraryA
GetLastError
lstrcatA
GetModuleHandleA
lstrcmpA
GetModuleFileNameA
GetCommandLineA

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ecode
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE