31e2fb3155bc276bc215ece5e1ec88be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31e2fb3155bc276bc215ece5e1ec88be_JaffaCakes118
Size

261KB
MD5

31e2fb3155bc276bc215ece5e1ec88be
SHA1

fb32af14890d7a5786c11521535be194c172b503
SHA256

678a74b9868d1d9eace4d7b7f499d99b31ccdfa8a6a8b57d7cbed22c9898d53e
SHA512

05ac4a23fe802c5548bd9f1e200281bbd6aeeb3705e5949ba31b5e13dc448c87a4fc0388132800839478eab21dc443b1984279f5cb2b5fd1e2424c1aed3b427d
SSDEEP

6144:XxLd+ihklSSX5/Q/ThAqJyqfRCOsIvI4riDlIvn:XqqAchAqgq57XIfDG/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31e2fb3155bc276bc215ece5e1ec88be_JaffaCakes118

Files

31e2fb3155bc276bc215ece5e1ec88be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2fd10e2b4143e5ff6a83b9dc407d5a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetTimer
SendMessageA
PostQuitMessage
MessageBoxA
KillTimer
GetDlgItem
EndDialog
DialogBoxIndirectParamA

kernel32

SizeofResource
Sleep
GlobalAlloc
lstrlenA
lstrcpyA
lstrcatA
CloseHandle
CreateFileA
ExitProcess
FindResourceA
FreeResource
GetModuleHandleA
GetTickCount
GetVersion
MultiByteToWideChar
GlobalFree
LoadResource
LockResource
WriteFile

comctl32

InitCommonControls
GetMUILanguage

shell32

ShellExecuteA
SHGetSpecialFolderPathA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 918B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE