a31c1740385bdcf7357a023a68a87a2a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a31c1740385bdcf7357a023a68a87a2a_JaffaCakes118
Size

381KB
MD5

a31c1740385bdcf7357a023a68a87a2a
SHA1

910be228d44d5cb06a6efcc78c5f83df53b787d5
SHA256

de346b4b8bf0e00e0a6cc2b1966aa2070ab54456e75477de35c3f8daffe34c11
SHA512

b8bba258bb5a1cd82f7a31119db86e01fb2ba89f87260b9df2f498044e7c33641e910ceff40258b4b381f51bc6cfdba92c793e6eb52329d3088e99078e28d94b
SSDEEP

6144:TX749Nr5+AJ/qs1u595Q01uAO1D2NqVBhd3e3MsESN2jNLjKdDeX33IHGO/NOPp:T7i8MZ1tZFlDhte3rwjNLmdDE3YHGVp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a31c1740385bdcf7357a023a68a87a2a_JaffaCakes118

Files

a31c1740385bdcf7357a023a68a87a2a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

079700deec2fc4d23cff8cc11dad8fa7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
GetProcessHeap
HeapDestroy
HeapCreate
HeapAlloc
HeapWalk
GetTickCount
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetModuleHandleA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

Sections

.text
Size: 363KB - Virtual size: 880KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ