30f6a982c74e2a38ce4c988dbd7aa718_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30f6a982c74e2a38ce4c988dbd7aa718_JaffaCakes118
Size

45KB
MD5

30f6a982c74e2a38ce4c988dbd7aa718
SHA1

2021df2bdd3421619c89c9b6d6561cfb9a3cfc96
SHA256

1ab94c72a92c87c27f9fe2f00e6ce27858a18a6501c272d38dd963e04f3fc251
SHA512

fce5ca694ba895b14be92d2504c682da944e85359c9884083125dce73ab394c45d48588e4b56393c4b4d6bb1f5495d18f682aac0c40b0267af4ea3ba1d2660d0
SSDEEP

768:0cePaErraFguscaPvkkfasOa9UZbDUDoSkfEJpPW6Mu2S+ACXQMpiJcmPK:0cePawWFFsca35f3DoSTJZW6+vf8PK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30f6a982c74e2a38ce4c988dbd7aa718_JaffaCakes118

Files

30f6a982c74e2a38ce4c988dbd7aa718_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4b15a2dc9560486858d304d3f9e5a4db

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBeep
LoadIconA
ArrangeIconicWindows
CharUpperA
GetClassLongA
IsIconic
CharNextA
DestroyIcon
FlashWindow
GetSystemMetrics
RegisterWindowMessageA
ShowWindow
CreateWindowExA
UpdateWindow
EnableWindow
SetCursorPos
CharLowerA
GetSysColorBrush
SetTimer
ShowCursor
GetMessagePos
SetWindowTextA
GetDesktopWindow
GetParent

kernel32

Sleep
GlobalFindAtomA
FreeLibrary
GetLastError
LoadLibraryA
lstrcatA
GlobalDeleteAtom
GlobalAddAtomA
CopyFileA
AllocConsole
FindResourceA
GetCommandLineA
GetConsoleCP
GetProcAddress
lstrlenA

shell32

DragFinish
ShellAboutA

gdi32

GdiFlush
DeleteObject
SetBkColor
CreateSolidBrush
GetObjectA
SetTextColor
DeleteDC

ole32

CoFreeUnusedLibraries
CoFreeAllLibraries

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ