31ddb43cdc7c846dde70f2b077242d07_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31ddb43cdc7c846dde70f2b077242d07_JaffaCakes118
Size

53KB
MD5

31ddb43cdc7c846dde70f2b077242d07
SHA1

21200555c8b0d3ccc79685f660d05f1e38a29d98
SHA256

f2a457ba9f05dcc5046aae3ac918f827458ea6da2130f3e8dea7a7f1d47b7b19
SHA512

303a89fe1c2bbbb0780d2c5626f8faeb09e0e39304b479a9e1965719795d4a07cc9a7cefc10823092b31834aecdcee9ea95d4fa5597c81b76fe046f332789675
SSDEEP

768:AyrEg7jKDYmtz9Hlz3VWpOJmIDRlBPI4v+Re+cfLDpc+SjPFPaq/6J5t+QDwPQJ4:buYmv1VmOXIISAnJSHQk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31ddb43cdc7c846dde70f2b077242d07_JaffaCakes118

Files

31ddb43cdc7c846dde70f2b077242d07_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c372311534116eeffdf56f3f6c69c5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
ExitProcess
GetProcAddress

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 45KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nPack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE