30fd2cc53258f45b8b301b1271654933_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30fd2cc53258f45b8b301b1271654933_JaffaCakes118
Size

177KB
MD5

30fd2cc53258f45b8b301b1271654933
SHA1

249059bb153a61b230e33b82c69579189fa3322d
SHA256

9096ee792939fa5923b66b8372c48d9d987d0e98a34c5274505d7ad5458bd2d5
SHA512

0bd90a0fdd60e227a9ac8a7c8f1ac1511712ca30b2cd8a0b8fce3a3411eaba597f0acfd7b7edce95694726d5cda6c1401a4e6d63b482beddb1eb503d3b7b3047
SSDEEP

3072:HSSDnbXwnu5+CqMkOc5MRwNA3ENLGHV/eyk1pAmzF4blnjSV7E:7LbXcusBMkOcSRwm3gG1G1WmzWlKE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30fd2cc53258f45b8b301b1271654933_JaffaCakes118

Files

30fd2cc53258f45b8b301b1271654933_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7694cad811a98506a0b02fdcf8a94403

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassExW
CreateWindowExW
MessageBoxW
GetWindowInfo
LoadCursorW
GetDC
GetUpdateRgn
EndDialog

kernel32

FindFirstVolumeA
GetStartupInfoA
GetPriorityClass
HeapCreate
EnumResourceTypesW
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsFree
GetFileType

oleacc

LresultFromObject

Sections

.text
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.apexi
Size: 1024B - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ