30c3d55bd22b909071cd487aa940b4ac_JaffaCakes118 | Triage

Sharing

General

Target

30c3d55bd22b909071cd487aa940b4ac_JaffaCakes118
Size

132KB
MD5

30c3d55bd22b909071cd487aa940b4ac
SHA1

e2c9b4f588daf74b061b6c3efd7b3eb9dc8d6c37
SHA256

10e0aedf66a4d57fa8bd217291da955b485daf0a65426c14cbc245f38bae65ef
SHA512

2b50f4b51dc94a09e088fd67cc2cb43627909426c6abf288a76c9eec10e4a43ee5b5645e77e5d1ee499e8930a8586b95f38118dbb8e22a6e8cbc41ba06118624
SSDEEP

3072:CwUSgxM++s2NPTmWo/3/rpRJznV54ExBV4Hy:CwUS8mpNPCzzpRJznV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30c3d55bd22b909071cd487aa940b4ac_JaffaCakes118

Files

30c3d55bd22b909071cd487aa940b4ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE