31fd7c778cb4733930dde1c4ec34f377_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31fd7c778cb4733930dde1c4ec34f377_JaffaCakes118
Size

44KB
MD5

31fd7c778cb4733930dde1c4ec34f377
SHA1

e45cf4931f5d751afb0cfbf8fc75701971e81dda
SHA256

fb03d68b7c3221f15af064249533a01091e6aeff15c337666f551813ddb0a9eb
SHA512

f043e4d020e4a83b4c71bddabd0cfebbe8bff59621bf213a3a81771aa43248f48b59bf9cf3dd561d18e548b8131ba8e8285da6768e6655c1f7cae4a9fa6fa5af
SSDEEP

768:SJZ9qzd/PBlW6Y38B9A/iBdaN8/bD+MvRniNf7T33VFUhZudcEzoGENjgdhFIvbH:SJZ9qJo89p/V/+iOfXnVFUXudcDGEDbH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31fd7c778cb4733930dde1c4ec34f377_JaffaCakes118

Files

31fd7c778cb4733930dde1c4ec34f377_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a9460aaf05c1c5daafc9ea4681306e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
lstrcmpA
lstrlenA
FindAtomA
lstrcpynA
GetModuleFileNameA
CreateMutexA
CloseHandle
GetTickCount
GetVersion
GetTempPathA
GetSystemTime
WriteFile
lstrcpyA
GetCommandLineA
CreateProcessA
lstrcatA
GetLastError
GetProcAddress
GetTempFileNameA
GetLocalTime
LoadLibraryA
ExitProcess
OpenMutexA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
VirtualQuery
GetVersionExA
RtlUnwind
IsDebuggerPresent

user32

wsprintfA
ClientToScreen
GetCursorPos
GetCaretPos
GetWindowRect
EqualRect
IsWindowVisible
GetFocus
InflateRect

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE