30b1ae2e11011f930cce6cd5cebe8a61_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30b1ae2e11011f930cce6cd5cebe8a61_JaffaCakes118
Size

814KB
MD5

30b1ae2e11011f930cce6cd5cebe8a61
SHA1

966fee4d66e5f3651c432ecc2bebe869d05ad385
SHA256

a01e7088bdc5b999e086a375faf8d6eb09fdc0a3a1cf84680029572f65fdcdbb
SHA512

026de14d9d38b5e7bcfbdadcc251b4a630719359b6e2a73fffccfca17f62cb53bef71dde14720fc6317f7b6524313c4fee5a6556c05d868bbfabd76a6159a7c1
SSDEEP

12288:M7KD0ClCIazKBpMAH69WcmMmjhmerPnkX9aEDwC3YIiH4SOeVonZp2N90saKFH:zD0CMzKfaRwjt1UwC3YIiHjCOxr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30b1ae2e11011f930cce6cd5cebe8a61_JaffaCakes118

Files

30b1ae2e11011f930cce6cd5cebe8a61_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cbc6c1399d9faefe6b16434cb0e2c942

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SleepEx
GlobalUnlock
FreeEnvironmentStringsA
CreateFileMappingA
FindClose
CreateFileA
HeapCreate
GetConsoleAliasW
CloseHandle
GetACP
LocalFree
GetLastError
GetConsoleCP
ExitProcess
LoadLibraryExW
Sleep
GetModuleHandleA
TlsGetValue
LocalLock
FindAtomA

user32

CheckRadioButton
CallWindowProcA
DispatchMessageA
DefWindowProcW
DrawFrame
IsWindow
DrawEdge
GetDC
GetFocus
FillRect
CopyRect
GetIconInfo
GetDlgItem
MessageBoxA

clbcatq

GetCatalogObject
InprocServer32FromString
SetSetupOpen
GetComputerObject
SetSetupSave

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ