31db4be5398a0bf7c0128fb18e037242_JaffaCakes118

General

Target

31db4be5398a0bf7c0128fb18e037242_JaffaCakes118
Size

78KB
MD5

31db4be5398a0bf7c0128fb18e037242
SHA1

a6f66d9514893de2d31fc2c4f13c287fcae71522
SHA256

21867819969f206a9cae5b0c69ccb77c9a56ec3f2ea503454eb257c6f14ba44b
SHA512

9a38a3bf372fc1f8583bb362153da49773836399efb2438723905ceb593461403da9157ee0dbf68aa5ca89da7637609a31095fd8c29e1536fc7a9d0d10aef74c
SSDEEP

1536:4UGYJByMVqBY5eUOQOC9B3j1h30qD2zOztlKspbaDYwLkRC:4leBHVqBHQjnxh30qDVztfmzIC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31db4be5398a0bf7c0128fb18e037242_JaffaCakes118

Files

31db4be5398a0bf7c0128fb18e037242_JaffaCakes118
.exe windows:4 windows x86 arch:x86

218b51fd279d10a264d394d492a4bd87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
GetTopWindow
IsWindowEnabled
GetMenu
TranslateMDISysAccel
SystemParametersInfoA
GetCursor
KillTimer
TrackPopupMenu
TranslateMessage

version

VerInstallFileA
GetFileVersionInfoSizeA

kernel32

GetDateFormatA
VirtualAlloc
GetCurrentThreadId
ExitProcess
GetCommandLineA
GetDiskFreeSpaceA
GetCurrentProcessId
LoadLibraryA

comctl32

ImageList_Create
ImageList_Add
ImageList_Destroy
ImageList_Read
ImageList_Write
ImageList_GetBkColor
ImageList_DrawEx

Exports

Exports

h21pHC472@24
tcP_VaTaB0_T@12
kP7em
mMDeqUmeCWyuc2
JctS8uR
zUlUg6Etf
K3agxx__Y2zlIj@16
FCb4XB@20
_ivhEnv487u6tOF
_WLmN40Sjz8wLB@12
CTR_d_Vb9
_XFD3tDOAL@20
MQVDe@12
F2TuclnQ0@8
_a_wI8T55_U88@24
_3R2ng
_jk3QVQ
_KGeGuiNeC@12
_xiJ4XA_lK
8t96thmJ6epi
XG51uu0oSW7Mn
_QZutguymil1@8
ox2wq0Ck4Jsu9
_rZL7B
Vo_6Zm4LY7qY@20

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ihdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 882B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.thdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

218b51fd279d10a264d394d492a4bd87

Headers

File Characteristics

Imports

user32

version

kernel32

comctl32

Exports

Exports

Sections

CODE Size: 14KB - Virtual size: 13KB

.data Size: 10KB - Virtual size: 9KB

.ihdata Size: 49KB - Virtual size: 49KB

.idata Size: 1024B - Virtual size: 882B

.thdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

CODE
Size: 14KB - Virtual size: 13KB

.data
Size: 10KB - Virtual size: 9KB

.ihdata
Size: 49KB - Virtual size: 49KB

.idata
Size: 1024B - Virtual size: 882B

.thdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB