31a2b0579844d4da862958e935b53a5a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31a2b0579844d4da862958e935b53a5a_JaffaCakes118
Size

110KB
MD5

31a2b0579844d4da862958e935b53a5a
SHA1

24d19c65271565a5af2dc9f311aa479483fc7892
SHA256

56b8935f751fcf49af0395e49114c2e6d088f83be453a63b1b7d6f9ce64b9296
SHA512

83005a5ae4278ad390762034df856ec38555fc7a358ca9d40b9afb7ea742839e67c4c02070f8e9350702559a7b62885be7b98912d9e1f11e7f6a728422acc121
SSDEEP

1536:bzWBwZ6GbxBqzkjsaU6tY8leApuxkDDJPrcbfqt6g+TzkRkCloLobzVg:eBwMGbbqMKVkDDJTusNGzkRl3Vg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31a2b0579844d4da862958e935b53a5a_JaffaCakes118

Files

31a2b0579844d4da862958e935b53a5a_JaffaCakes118
.exe windows:1 windows x86 arch:x86

bdd472df39492517efe0cf64ba83a886

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomW
GetStartupInfoA
GetModuleHandleA

msvcrt

_initterm
_exit
_XcptFilter
exit
_acmdln
__getmainargs
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 116KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ