31b8125bf94a135b17dcf69c6f56db86_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31b8125bf94a135b17dcf69c6f56db86_JaffaCakes118
Size

84KB
MD5

31b8125bf94a135b17dcf69c6f56db86
SHA1

6772f7c4c9bfe748974ec558913f0288eafd5b20
SHA256

0fe2b5525bbc055e1c5772e0bf3f710f592cbbb8a8c711e92f82fad2f169bc4f
SHA512

b39553139e71b1ffb522add8f2588d3abea1dd76e25a92b11a6f29070529fd52bf9eb2a7685a4644b67245decc13b4cf0ec8e998b2b21ff18df639dab4fbd86f
SSDEEP

1536:2YqRG0a40zd6pjyiNBug0BP6CzSawEsKc6H3nYz57vTR3wT66vlmdPnP1WxJQ8il:2XRGL40zdieiNIg0ICzXc6HXep3wT660

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31b8125bf94a135b17dcf69c6f56db86_JaffaCakes118

Files

31b8125bf94a135b17dcf69c6f56db86_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aef4354f5e3703ce527791d077356368

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateMutexA
ExitProcess
GetLastError
InterlockedIncrement
ReleaseMutex
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
WaitForSingleObject

msvcrt

_close
_fileno
_fstat
_isatty
_lseek
_open
_read
_write
_HUGE
__getmainargs
__mb_cur_max
__p__environ
__set_app_type
_assert
_cexit
_errno
_fileno
_fmode
_fpreset
_iob
_isctype
_pctype
_setmode
abort
atexit
fclose
fflush
fread
free
fseek
fwrite
getc
malloc
memchr
memcpy
memmove
signal
strcmp
strtol
strtoul

Sections

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE