31a6817976c71900c80b7207531d1adc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31a6817976c71900c80b7207531d1adc_JaffaCakes118
Size

2.2MB
MD5

31a6817976c71900c80b7207531d1adc
SHA1

2ea2472ca8f65402ea9618db9409aa94083b26ef
SHA256

cd73fb2c1be5cf3bd402b50a11b165f7a2c95385298d18c359c380a91b097635
SHA512

a839385563829ec1bcd0c90b71b416ac1debb3985910c7e2b1836984aac4a9c55b1eb386a6b2edd2588bf90420a1deb20c89748eb08ec76c58c7277d81b05e97
SSDEEP

49152:WKe3HbbWaWNa4wczGVlDDaNJhy0e0oxanrmK99U5ty1a:xe3bbWaWNa6+ZCe0VicUm1a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31a6817976c71900c80b7207531d1adc_JaffaCakes118

Files

31a6817976c71900c80b7207531d1adc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cdfd3a6de5201082d5623aa2ef65eea3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadResource
GetLastError
FindResourceA
LocalFree
_lclose
_lwrite
LocalAlloc
_lcreat
Sleep
WaitForSingleObject
CreateProcessA
lstrcatA
lstrcpyA
DeleteFileA
GetTempPathA
LeaveCriticalSection
SizeofResource
GetCurrentThreadId
HeapAlloc
GetSystemInfo
GetVersionExA
HeapCreate
InitializeCriticalSection
HeapDestroy
DeleteCriticalSection
GetModuleHandleA
GetStartupInfoA
ExitProcess
GetCommandLineA
HeapFree
EnterCriticalSection
LockResource

user32

LoadCursorA
DefWindowProcA
CharNextA
SetCursor
DestroyWindow

ole32

CoInitialize
CoUninitialize

comctl32

InitCommonControlsEx

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 305B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ