30963dd5d58dba92f115ba4ba45115ee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30963dd5d58dba92f115ba4ba45115ee_JaffaCakes118
Size

333KB
MD5

30963dd5d58dba92f115ba4ba45115ee
SHA1

e8f65e440206688f36e8c319affa4ad44c06160c
SHA256

c7efa57e9d28d9cb53a9098708dcce0e2646c414b2c47b137cdfabda24d3ffaf
SHA512

43c075ef75241d2afaaea74ed23712e7fe48e18e243703ef03e7d5ba920e4bd5dc920261a6abb535ae267a6b9bba077f2fc8e8002780586342c1b2eec0f46bba
SSDEEP

6144:i4ECiH6w+ZT+pAIcLtnKMpCscJz0+nkrTTW/hsV/sdghP57YhfV6p2P:bE1HfiTZIcLt1cJz05HW/hB0P+NY0P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30963dd5d58dba92f115ba4ba45115ee_JaffaCakes118

Files

30963dd5d58dba92f115ba4ba45115ee_JaffaCakes118
.exe windows:4 windows x86 arch:x86

04b5c63f84575a5301a902a6bc31e081

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
SetBkMode
SetTextAlign
SetTextColor
SetBkColor
DeleteDC
ExtTextOutW
SelectObject
CreateCompatibleDC

kernel32

GetCommandLineA
GetFileType
TerminateProcess
GetStringTypeA
GlobalFree
GetStartupInfoA
QueryPerformanceCounter
LocalReAlloc
IsBadWritePtr
InterlockedIncrement
GlobalHandle
GetExitCodeProcess
GetThreadLocale
HeapCreate
GetSystemTimeAsFileTime
GetLocaleInfoA
HeapSize
SizeofResource
TlsAlloc
ExitProcess

oleaut32

DispGetIDsOfNames
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

shell32

SHGetFolderPathW
CommandLineToArgvW
ShellExecuteW

msimg32

TransparentBlt

Sections

.text
Size: 210KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 120KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE