30d68bcb8321ba86053278994f2edc03_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30d68bcb8321ba86053278994f2edc03_JaffaCakes118
Size

428KB
MD5

30d68bcb8321ba86053278994f2edc03
SHA1

05937e57d09a5e8946ec0ba700f30ea3b7d6b2c7
SHA256

b49f566daf852e49c0ed4d09147f5a1dc08a642694c20c3f08706669aa4e12e7
SHA512

54f45fbe4448ab9b9be42f8a588eb238d72ca990574fe8eee8a817692b106a43d698f649249a642fa33afa6f3624900e5d3365719307445687af48af86ffd0c5
SSDEEP

6144:K4kzolmIMLPkuWCgXmyaunsFnJFoUmqC34sn7Q3noIWa+bWI672TOqbb7LUhry7b:MzolmhLR6sFJFonGp+Q7I1DQ9A0Enj8y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30d68bcb8321ba86053278994f2edc03_JaffaCakes118

Files

30d68bcb8321ba86053278994f2edc03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ