31c5f9756096c11f4f62744bf42da9c0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31c5f9756096c11f4f62744bf42da9c0_JaffaCakes118
Size

39KB
MD5

31c5f9756096c11f4f62744bf42da9c0
SHA1

e453a30790424f22a9d541795151142047f431b3
SHA256

1d381d6c9dcf283d55c73a47ff1cb315e92e913a84efb09542c271bdf646a356
SHA512

de431ff392d9c7be702c0d648a9434c66ba8ae96ab918524e6a3665168daf6aae2db2a6dcfb2d5926d768b72d0d34861a5fdf6585e57971e8aa4107d24f02306
SSDEEP

768:SzLoYj/s3MY2C162DG9pFz6uEpYJgiMgIf2aNBIFZCzccx5BXPos:0MYQ3n2WTczxqYJgHf2aNBSZ5cx5FF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31c5f9756096c11f4f62744bf42da9c0_JaffaCakes118

Files

31c5f9756096c11f4f62744bf42da9c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

10b7bb8647cfba97fc3b63299a535991

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObjectEx
WaitForSingleObject
HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA

user32

SetTimer
SendMessageA
GetActiveWindow

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 330B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ