30591db74612deece6de48de2b04bd52_JaffaCakes118 | Triage

Sharing

General

Target

30591db74612deece6de48de2b04bd52_JaffaCakes118
Size

151KB
MD5

30591db74612deece6de48de2b04bd52
SHA1

d2706052f4dd11b0bd5292d1057ea6bb6efdebcc
SHA256

5b648f3a7015a91ba238458bb5615facfbbb0e07fdc15e191dd2d834bfc819da
SHA512

656d5905fe5576cb33922bb3ed87c588ba78dfaa66945137cc72509a4ee715fde7e4fb8d89215507c998279ca8caa3310cd5339c5b550767b4f2ea026bced78d
SSDEEP

3072:uUR+SomDayputd21OoFNSUcnyoQ/FhMT65t1AlfxiVwYtis93Prvy:4SDDayp/dFhMT6L1S0icr6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30591db74612deece6de48de2b04bd52_JaffaCakes118

Files

30591db74612deece6de48de2b04bd52_JaffaCakes118
.exe windows:4 windows x86 arch:x86

903035e9b7e5e9e17b6636b16dc5eb20

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
lstrcpyA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ