302b4dcf260769eb1dfe3721a030ab6e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

302b4dcf260769eb1dfe3721a030ab6e_JaffaCakes118
Size

40KB
MD5

302b4dcf260769eb1dfe3721a030ab6e
SHA1

adf6b04b30e29c08e30f78272afec2cfe74b639f
SHA256

4eb52842e4150e4adc931b39c58057b9714b8aac4cb011bf7ff37f195731a7f2
SHA512

9e9c15736471d666f5a95111a6f599b906e66d6a3405e2134c881c35e064e5b15d679a5896975f370f558ea95cbcc5a75f8b33506ed5510772a92093d0b19dad
SSDEEP

768:apuZG8F3AXhfxlx6V680bAli3J9Pyj1OB4gauGN3wG3auLZ2YPJ3bC:ap+BF3AhDxE/vu96OWuGqSAYo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
302b4dcf260769eb1dfe3721a030ab6e_JaffaCakes118

Files

302b4dcf260769eb1dfe3721a030ab6e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e9de9ce91de7c0b75c8e3e44420e0693

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpW
GetModuleFileNameA
IsBadStringPtrA
GetModuleHandleA
ScrollConsoleScreenBufferW
EnumTimeFormatsA
BuildCommDCBAndTimeoutsA

user32

TranslateAcceleratorA
GetPropA
CharNextExA
InsertMenuItemW
RemovePropA

gdi32

CreateColorSpaceW
GetMetaFileA
CreateFontIndirectA
GetTextExtentExPointA
CreateScalableFontResourceA
CopyMetaFileW
DeviceCapabilitiesExA

Sections

.data?
Size: 32KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.masm
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.share
Size: 1024B - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ