31b0ed3b38f01fe3b16572a2a41c69f2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31b0ed3b38f01fe3b16572a2a41c69f2_JaffaCakes118
Size

81KB
MD5

31b0ed3b38f01fe3b16572a2a41c69f2
SHA1

113dbc5f1dd0032d26c81868320ff3b6c03cec32
SHA256

63e1c9dcf6aa824fe914bcbcb9a981e3cd12a91c8a81753677c4e54a3e1b01f5
SHA512

e4c0ea4aba09e59f248adeb5a0fb322c1b37083d521911e652540663e32552ca63ef16ace8e392012767fbb2b1891dadec0dddb0a38ef3a959c6e85da8d35d29
SSDEEP

1536:Wxy6HcgLQ3SwG8uvn85QlpclIaYFNCPAVXNgVH5K5fK6:wyELQ3SwG65Sp/aYFJ3g65f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31b0ed3b38f01fe3b16572a2a41c69f2_JaffaCakes118

Files

31b0ed3b38f01fe3b16572a2a41c69f2_JaffaCakes118
.dll windows:4 windows x86 arch:x86

b843944ace23453d54c976b6bfe95c4d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess

user32

MessageBoxIndirectA
BeginPaint
DispatchMessageA
GetDesktopWindow

gdi32

Arc

Sections

.text
Size: 48KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.pdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE