30aaeb8695a007fa851b852c327ccb91_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30aaeb8695a007fa851b852c327ccb91_JaffaCakes118
Size

37KB
MD5

30aaeb8695a007fa851b852c327ccb91
SHA1

e22f6323d3e22a12613b70803cd41507a5129d99
SHA256

7f721989b891c40c6420f0ea300db4a6e6761d6a960fcb1016881020cf881675
SHA512

38810a5132afc93f7a3d4a32936f9afbbeb887a94a65982ff7136ed6b760f893d2f0f0ecb369112496752ea8001d5bbca2380c354f757a2833fbbc60a1e9735f
SSDEEP

768:jpuxbbb93pfzxWt7QYQ8IgDidhHPjAJYvHF0lwY437avXKrnrT:j0Rbb5WRQYt9ir/2wraY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30aaeb8695a007fa851b852c327ccb91_JaffaCakes118

Files

30aaeb8695a007fa851b852c327ccb91_JaffaCakes118
.exe windows:4 windows x86 arch:x86

879072da78b6146d76f51c669b56a5f6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetTickCount
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc
GetProcessHeap
VirtualProtect

user32

ShowWindowAsync
GetLastActivePopup
RegisterClassA
GetParent

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE