31e07d7b6fa3e6582fd4a357d6b04651_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31e07d7b6fa3e6582fd4a357d6b04651_JaffaCakes118
Size

600KB
MD5

31e07d7b6fa3e6582fd4a357d6b04651
SHA1

988a5016fa09f007677ea2decd9ccd0f1e592027
SHA256

fee3dfec78aa8e512d6a05fd44daf0409167e8b1f4d0f8b569461a8a0367381a
SHA512

b7cdbe422c64c86a23b8ff114788b3af3198611eb4a8d7c7c6ad1bce051a053100cb7448661c9b257576b7b85c744ca641966de56d43d1233bc40cc7be499430
SSDEEP

12288:FqSVuip7vVhNoFtAIl4HVOAlH0GvghHV0WIqq3uTJlYxBMOz/c:FqAuK7vVUFtiRHtlGwuVOz0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31e07d7b6fa3e6582fd4a357d6b04651_JaffaCakes118

Files

31e07d7b6fa3e6582fd4a357d6b04651_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa225e54b763276d6b0fd2dfe65f8a7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadModule
GetProcAddress

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 541KB - Virtual size: 541KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ