30113a5ae3584fee35bb99e95722d221_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30113a5ae3584fee35bb99e95722d221_JaffaCakes118
Size

19KB
MD5

30113a5ae3584fee35bb99e95722d221
SHA1

59e4f49c2496a29d2da91072c5edd5c485d476d0
SHA256

0dff389a6151b5e8059c9bc36d06e5a22e6aa9bb88e63355305a6d628f73ab36
SHA512

1d27757982b6200a7d29fa18c23b1dbba8ade726ba88769b479296945f6c655370a698c285e994486113768aed990f9a1b025dc8712d2daaea3c025a83e4c8fb
SSDEEP

384:+Zr3zOiqEPo+oP2jp8RMP+OZAGBxZIExplSmE2YG1xAdOkTHgRawxYM5q:C3q4iUSRMP+oBxBxGh2EvHgt5q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30113a5ae3584fee35bb99e95722d221_JaffaCakes118

Files

30113a5ae3584fee35bb99e95722d221_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d346e216b557a7aa248d983b53f54dbd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
SetFocus

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
lstrcmpiA

msvcrt

_CxxThrowException

advapi32

RegSetValueExA

ole32

CoCreateInstance

oleaut32

VariantClear

Sections

.text
Size: 19KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE