31b319725ee6178b16869c386b209d79_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31b319725ee6178b16869c386b209d79_JaffaCakes118
Size

23KB
MD5

31b319725ee6178b16869c386b209d79
SHA1

f917b29d10f14207c6addba17c9d15de92b76927
SHA256

576f27df7d485ff0e89ab62678b018ac3336c5ffaaf537008a6f862e3a94f2dd
SHA512

9164e8c64fb67e2a7f0e3e9b2a190fb661372858bab45a84c400004fe7faec13e486ed3dec4847e49240d844f3d7e7e78615a7ad6bee68e6793a450c5096ba98
SSDEEP

384:bamxPhSXoCW/8AoWwW/8AoWw9xv1hkNLdbaLa4CwUJuUCSFCJWe8EDEWW:e+PhSXooA8AuLv7wbaLa4PU48IM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31b319725ee6178b16869c386b209d79_JaffaCakes118

Files

31b319725ee6178b16869c386b209d79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

13c956d8314201a9840987db38751607

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
WinExec
GetWindowsDirectoryA
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
GetTempPathA
GetSystemDirectoryA
Sleep
GetPrivateProfileStringA
lstrcatA
DeleteFileA

user32

MessageBeep
GetMessageA
MessageBoxA
wsprintfA
TranslateMessage
DispatchMessageA

msvcrt

_except_handler3
_stricmp
atoi
strrchr
_itoa

netapi32

Netbios

Sections

.data
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ