31d5a80d20fca160c414e52ca0a797ec_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31d5a80d20fca160c414e52ca0a797ec_JaffaCakes118
Size

8KB
MD5

31d5a80d20fca160c414e52ca0a797ec
SHA1

28a53c70cf54e58aa66b550ebdca6a59c562f1ca
SHA256

b2e92b2bca3439e579b188d89db93c4bbb083542d01962b72bd0eaa13f2f4a96
SHA512

1d86342bf4cdbb13d87c85b04733bbbdde20a24ba98a2ee038a8466247cf24a45693b177ffd38b3432fde427abc0fde5c40c37efde180bc3298d2fd9bf9c44d1
SSDEEP

48:i6dOpe5sg98/7aEXFbFXEnFTDP/4fGBSKk8nUi79tWI:gp2JzEze9DPFwunUeN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31d5a80d20fca160c414e52ca0a797ec_JaffaCakes118

Files

31d5a80d20fca160c414e52ca0a797ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

503923a41152ddf89463b52a473d43e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatA
lstrcatA
GetLocalTime
lstrlenA
GetDateFormatA
CloseHandle
GetCommandLineA
ExitProcess
lstrcpyA

wininet

InternetOpenUrlA
InternetOpenA
InternetConnectA
FtpPutFileA
InternetCloseHandle
InternetReadFile

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA
GetUserNameA

Sections

.text
Size: 1024B - Virtual size: 846B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ