30bdcd769f0e709bb5e610e4c610399e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30bdcd769f0e709bb5e610e4c610399e_JaffaCakes118
Size

164KB
MD5

30bdcd769f0e709bb5e610e4c610399e
SHA1

3e0cbfd306f4738217a73b05f1bf6dfba2d8437a
SHA256

cbf94aeb4d9f7592a41c26b69186164820dee49b0799a433b04751146f8bcc06
SHA512

5af7ee6128b5148072d4473af7971b4eec748517113d8d4e619052b7c318d888dd0136eecf29c3ab975a3bfee43c1f1c0678f4567c37e29416e174c06c972d6d
SSDEEP

3072:zBV+dp6Ihm1pKsI2/INmWvKsYTXDqKgn69WtvN33jpk9QVGV+dYO4:XO0Ih+hv/sKBTDqKlcvZ9k2c+dK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30bdcd769f0e709bb5e610e4c610399e_JaffaCakes118

Files

30bdcd769f0e709bb5e610e4c610399e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8e58ff8e68350e55a51f921f132b92b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetTapeStatus
LCMapStringW
ClearCommError
ExitProcess
EnumResourceNamesA
ExitProcess
LCMapStringA
GetModuleHandleA
GetCPInfo
GetProcAddress

oleacc

LresultFromObject
CreateStdAccessibleObject

user32

GetWindowInfo
MessageBoxW

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ