30549a15bb98a007edd6f079b3404ea2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30549a15bb98a007edd6f079b3404ea2_JaffaCakes118
Size

195KB
MD5

30549a15bb98a007edd6f079b3404ea2
SHA1

6d721ac2d30c7754c4540dac05cb2dbce1f37fbb
SHA256

2e804e1c0306da8d7050d016162cd868eb7e2a5d42a50fe24860441ad6b61110
SHA512

a3d008fdb65d97cbf1d25cc3553c2af1006f05aff2bfddafa3580c7bd8339fa1b1bb0ac40f26d24f4e90cea8962b6cc5ecf672ca19905d699b8f8725a5a31dbd
SSDEEP

3072:NVnKqVwonfEqScN86rTbu8U+WfGHXUwrGmAAOxfH8xOaxRsWoavICyWwlL:ictn8qTNjrXuBBfGHXUSzOfax1vUp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30549a15bb98a007edd6f079b3404ea2_JaffaCakes118

Files

30549a15bb98a007edd6f079b3404ea2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

51c7b5c76ac2d59f7a44dbf4a9b163df

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

NdrFixedArrayFree
UuidCreate

winmm

timeEndPeriod

advapi32

RegQueryValueExA
RegCreateKeyExA
RegOpenKeyA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegDeleteKeyA
RegSetValueExA

kernel32

FlushInstructionCache
GetModuleFileNameW
UnmapViewOfFile
FindResourceExA
EnumResourceNamesW
SetCalendarInfoW
MapViewOfFile
DuplicateHandle
FindFirstFileA
FindClose

shell32

Shell_NotifyIconA

Sections

.text
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 788B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ