31a64373c6508ccc8fe6ce9fb80938ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31a64373c6508ccc8fe6ce9fb80938ee_JaffaCakes118
Size

62KB
MD5

31a64373c6508ccc8fe6ce9fb80938ee
SHA1

340b4004b22ba6ba59ff6feeee4a279985a2dbac
SHA256

679afea1c74e7e2cf7618aedb12d2ae0d38cd22af5e42248fa52f39f8001ed96
SHA512

62be98bc8be205d94487c36a20c159bb129d5e4af728aaaa0c437112d3e3495cdef743cd732ff1ae5d338f56653a6b20b8acb15e41815e6dc6101edc1862b369
SSDEEP

1536:6VfWZUeR6tMV0sQ1qChBPWsR0YqSI4/a6:6VfWZUZC0sQIi+shg4/a6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31a64373c6508ccc8fe6ce9fb80938ee_JaffaCakes118

Files

31a64373c6508ccc8fe6ce9fb80938ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c4a866dbce42710b79f59876223b10cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ConsoleMenuControl
SetComputerNameW
GetSystemDefaultLCID
GetHandleContext
GetConsoleTitleA
GenerateConsoleCtrlEvent
FindVolumeMountPointClose
QueryActCtxW
OpenMutexA
GetCommandLineW
SetConsoleNumberOfCommandsA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE