30a3a92a759d3c0abc6ea859d06a4eba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30a3a92a759d3c0abc6ea859d06a4eba_JaffaCakes118
Size

62KB
MD5

30a3a92a759d3c0abc6ea859d06a4eba
SHA1

b23968549cab408539be1edbab412ec786e87b1b
SHA256

0e34e5538848341ed5df9f22b1f795c9ad88a36ba09ce99f46af6576bdfebaff
SHA512

55cecc5a141b3085a016e7422cd75a2b1e37a08840d49d57affb7d2e6d637fdf6964a3d570e7e83434c507e31ae6ea5b3d4e9d74cbeaa9edd48a10a185f223a0
SSDEEP

1536:CUZGv1OXEG6m2Kgp3K5zvkHCd9T6cwC9erBPxnsLH56vN:CUZA1aEtm2KGK5zv8iWtVvN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30a3a92a759d3c0abc6ea859d06a4eba_JaffaCakes118

Files

30a3a92a759d3c0abc6ea859d06a4eba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cb39e8b54d87df06c6f9ddbadb096f30

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryDepthSList
GetSystemDefaultLangID
ReadFileScatter
GetCalendarInfoW
CreateNamedPipeW
EnumSystemLocalesW
GetEnvironmentVariableW
CreateFileMappingA
FreeUserPhysicalPages
TlsSetValue
CreateNamedPipeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE