31bcc3c94c1bfd3793bc62648737ae43_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31bcc3c94c1bfd3793bc62648737ae43_JaffaCakes118
Size

456KB
MD5

31bcc3c94c1bfd3793bc62648737ae43
SHA1

74274d8e1a455814a1600ec1085d7729cfaf266e
SHA256

5fb23d4d260223c34a9256fcb3bfcdb3b209a5308abb8e6ee5724db3b64f6d8b
SHA512

59b721f4d9f376898460b9ba5230733606a8698de77880afdea52453bb446777868b6a1b0881ddb0ce8228982cbb1a8cd579ef242d1e263eecdb4ec2f49493e4
SSDEEP

12288:GvAP1Jqu8KjHOfUfGXXflS0s7l8NYazbd5k3U6E:Gw1ou8CHWXXAwGOEk6E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31bcc3c94c1bfd3793bc62648737ae43_JaffaCakes118

Files

31bcc3c94c1bfd3793bc62648737ae43_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1738985ef3490ee0e357401a5c199c8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 450KB - Virtual size: 450KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE