31c1fe85d861c7744417b076c6b4fe10_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31c1fe85d861c7744417b076c6b4fe10_JaffaCakes118
Size

9KB
MD5

31c1fe85d861c7744417b076c6b4fe10
SHA1

f60c77b8c0dba8e68dbdaa587bf5cb949329bad6
SHA256

55643e887f3951a11e8e1d1ea233c049f04c8aa0ec09bafcf49578f9f71154ae
SHA512

147f86e7ed3fbe3e9f45b927214e15d7af6db5aed8f9eee396c80505c003b02534ee6e2959b78913a8841ea503124610ca298a7c86c1e466a5a000bb38f0347b
SSDEEP

192:owoGsJCN4lBesxLYIs7Drge4cYKJ49ooKAAR:rWQN4besw7Ye4XKJ49oVp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31c1fe85d861c7744417b076c6b4fe10_JaffaCakes118

Files

31c1fe85d861c7744417b076c6b4fe10_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE