30fa61dde43e80ae1088430fd4f3fa7f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30fa61dde43e80ae1088430fd4f3fa7f_JaffaCakes118
Size

192KB
MD5

30fa61dde43e80ae1088430fd4f3fa7f
SHA1

455b165f98853d4d6e31264ad5703d5d5e4e03d7
SHA256

5a0284afbcd3ad5a37dd1a2159ad43bb0a9827865a4bef3bdc4b923df8ce23ff
SHA512

e6a91bbafa000c7f681282214e17c5036a318c8e218da2fc4851f492e8f0e02095bdbb85bf14f2a692e60eeeb0c70b4922cea7ded53113ea18ec1ea495764e81
SSDEEP

3072:lekqdP5aD8Vm6r3fBP3ZGvlDXJOV2WpNDfhMc1G8WuGjxKgTDURpIBkxL0Hy4vIr:lUdP8xopvZwlw/NDZMjVtTQRpFfT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30fa61dde43e80ae1088430fd4f3fa7f_JaffaCakes118

Files

30fa61dde43e80ae1088430fd4f3fa7f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

20629f5de6b48c439424718b6fae0853

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalGetAtomNameW
RtlUnwind
SetFilePointer
GetCPInfo
HeapSize
WriteConsoleA
GetConsoleOutputCP
TlsSetValue
TlsGetValue
GetTimeFormatA
IsValidCodePage
GetLocaleInfoA
EnumResourceNamesA
GetOEMCP
GetDateFormatA
GetACP
MultiByteToWideChar
GetCPInfoExW
VirtualAlloc
HeapReAlloc
SetStdHandle
TlsAlloc
RaiseException

shlwapi

SHCreateStreamOnFileA
PathAppendA
PathIsContentTypeA
PathIsFileSpecA
SHCreateStreamOnFileEx
PathCreateFromUrlW

occache

FindControlClose

Sections

.text
Size: 92KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 900B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ