31d0728dd7b164d97047a0b0e4b16253_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31d0728dd7b164d97047a0b0e4b16253_JaffaCakes118
Size

49KB
MD5

31d0728dd7b164d97047a0b0e4b16253
SHA1

e0542ea45300a8790eddeb43582aefd4c1632006
SHA256

17293fdcc547d23b6af8bbc5049b6ce40e3abfd39d068075f2f72cb7bbe88d9e
SHA512

d1c1cce95d6a1395cb010fa1efc3906712460e2c73337bbc90ae50626c37d08ad82757a8d102b30a573fa6a09b7699b029811a784c1ab8a05b89e732106a64c4
SSDEEP

768:5266+1YOpXwTUgEiZMgEcl7hSEC1axeureunneuIytcStnb6Xn9UgucML:o66+1YOpAEDcb1+QcSZbtaM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31d0728dd7b164d97047a0b0e4b16253_JaffaCakes118

Files

31d0728dd7b164d97047a0b0e4b16253_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37f3cd05a4ed0aa309b2569719cfa873

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

wininet

InternetReadFile

Sections

CODE
Size: 18KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE