30a0060d97b6cb161a4f15de148159da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30a0060d97b6cb161a4f15de148159da_JaffaCakes118
Size

160KB
MD5

30a0060d97b6cb161a4f15de148159da
SHA1

d87b4711850f9a405ac987e739526e019a084388
SHA256

8bfd98a0b01819959a594c635a9a0ef0899f655965d98e7eb9f5f76b952d7f5d
SHA512

239f1ad4f9cf7bed3e49dd70042e6874dc0470565705e02d72272af43764befb0eb4e2be8134bc00d3d91f70f370028520c6d022b44e1c99fc66f64b9373e994
SSDEEP

3072:3HTKViP3BHFVd2hrmKgZ2AhHzMrX1EkFEe9lnzZqAdsNzCzFBisyuVqn8:3HTKifhMh6V2A9MrXqkFjsFNmzFgs1q8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30a0060d97b6cb161a4f15de148159da_JaffaCakes118

Files

30a0060d97b6cb161a4f15de148159da_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a6616c3eb03e35ab40eb95a176dc81c0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
GetCurrentProcess
CreateFileA
LCMapStringA
ExitProcess
CloseHandle

user32

wsprintfA
SetWindowLongA
CreateWindowExA
CharLowerBuffA
CloseWindow

advapi32

RegOpenKeyA
RegSetValueA
RegCreateKeyA
RegDeleteKeyA
RegEnumValueA
RegCloseKey
RegEnumKeyA
RegDeleteValueA
RegQueryValueA

Sections

.text
Size: 140KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ