31bf5bf72b67aaea1a14f6a996f708ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31bf5bf72b67aaea1a14f6a996f708ca_JaffaCakes118
Size

483KB
MD5

31bf5bf72b67aaea1a14f6a996f708ca
SHA1

0e811c8eeafc538f448057860135218986ba99d9
SHA256

1689ac4116c2c8da65f1ab2557aeaa3f181c4dff6993048425ade2ab6166e6b3
SHA512

874c0b556ee722292e43db11fe9c2052eaa49d835af21a8cbfe79ee1b4879d53664a8da578bbb40514167c5e6599a96500482ed3a8df5f4d50851c4b349d8603
SSDEEP

12288:ixfYbMo76s27tHdYuZG5sxZHxhPK88m1IZZ7UHbg1+jJ:eKGsGYuQsfPKnZf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31bf5bf72b67aaea1a14f6a996f708ca_JaffaCakes118

Files

31bf5bf72b67aaea1a14f6a996f708ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

869fac6e264765ad6c4e928cdf06e278

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipAlloc
GdipCreateBitmapFromFile

kernel32

FindResourceExW
FindResourceW
LCMapStringA
LoadResource
LocalFree
GetVersionExA
FindAtomA
lstrlenA
HeapAlloc
HeapFree
GetTickCount
GetProcessHeap
GetLastError
IsProcessInJob
ExitProcess

gdi32

GetFontData
DeleteObject

user32

GetKeyState
KillTimer
SendMessageA
SetTimer
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
PostMessageA

Sections

.text
Size: 321KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 832B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 154KB - Virtual size: 611KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ