d31a2224d83f4e34289c2dd31f5cf01c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d31a2224d83f4e34289c2dd31f5cf01c_JaffaCakes118
Size

63KB
MD5

d31a2224d83f4e34289c2dd31f5cf01c
SHA1

d6aefaf26d338b5691ec7ffe79e828d97e5f0c5d
SHA256

8c614ef8d8d4db2951ee77e1fb2d5a0ddc33310916e5af373e3b35652f116796
SHA512

2cb17ebbb2eb653432136dd5f4c9b5868bc980aca52386afd5e9b817dd000e1a47c5ee7897c03f36b9a38215adedfa591d25a60cdfb31e0c8bf4cfa4c1dc75b7
SSDEEP

768:4MIC8Hwoc1imnxLLWu7tqQYSuBOWnGr11oGf5JxmfJkSQKqgIUijiCghh:4M5WwoOvtqpSuAWnK11hHlPmIUaith

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d31a2224d83f4e34289c2dd31f5cf01c_JaffaCakes118

Files

d31a2224d83f4e34289c2dd31f5cf01c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9300ab50112ee8542c0b9df12f6a0bc4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateSemaphoreA
GetProcAddress
CreateEventA
SetEvent
LoadLibraryA
GetComputerNameA
ResumeThread
VirtualProtect
LockResource
LoadResource
FindResourceA
VirtualFree
HeapFree
GetProcessHeap
VirtualProtectEx
VirtualAllocEx
GetCurrentProcess
ExitProcess
LocalAlloc
LocalFree
GetModuleHandleW
GetCurrentThreadId
GetModuleHandleA
CreateFileA
SetFilePointer
HeapAlloc
InterlockedExchange
RtlUnwind
VirtualQuery

user32

GetClassInfoExA
wsprintfA

Sections

.text
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ