31f9398b90259716e201cf482991a044_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31f9398b90259716e201cf482991a044_JaffaCakes118
Size

20KB
MD5

31f9398b90259716e201cf482991a044
SHA1

6077ce100c4f6d884eefe9ef860d341446643b2e
SHA256

22c1f588bf763c3797f044edc192439ad90b573c67bbb48f5fcd41496f3f9834
SHA512

d281d471d82166ce54e3905e0b96f42ede1dd3d5c5aed077052c4e38627fea01bec03464f4e7bc7ad16da2cf4a0c6888f256741eea2921620855c82c1cef16a0
SSDEEP

384:7TMGt4vWTYUz7o4oT8ktQKQcXXOtKtlOl0szto:7YGtAWTro2RcXXOgt4l0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31f9398b90259716e201cf482991a044_JaffaCakes118

Files

31f9398b90259716e201cf482991a044_JaffaCakes118
.exe windows:4 windows x86 arch:x86

07e66892912814f592d83edddecdc95a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
CreateEventA
GetFileAttributesA
lstrcatA
GetProcAddress
SetEvent
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetTempPathA
lstrcpyA
lstrlenA
SetFilePointer
LoadLibraryA
CreateThread
WaitForSingleObject
GetVersionExA
WriteFile
ExitThread
ExitProcess
RtlUnwind
CreateFileA

user32

MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
PeekMessageA
ShowWindow
CreateWindowExA
SetThreadDesktop
CreateDesktopA
CharToOemA
EndPaint
wsprintfA
DestroyWindow

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ