30db589328c918ce61fe427a23130c66_JaffaCakes118 | Triage

Sharing

General

Target

30db589328c918ce61fe427a23130c66_JaffaCakes118
Size

177KB
MD5

30db589328c918ce61fe427a23130c66
SHA1

8a0e24a3f282d904ebf8aafa111606f8703dc884
SHA256

9b0abb91c51f31a43452784c71eaa4131e5ab326b5d5ba6f9f11c743772097dd
SHA512

369ce810c3f6fd2fb597001f1ce8f8db58dbb4275fe470a52a740598e23f6cf2aca93c00345d1d2619c757bbd199394921b32752313fe62e6588caa1be4dcc29
SSDEEP

3072:zyuLH83Yzg4Fi8MxZPlvXBHcCUo8LBxTU/g0zUFi4p+Ohy3SGziCI3vf9l6q7CS4:z3b83YWZBB8+STUX4i423SHX/flh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30db589328c918ce61fe427a23130c66_JaffaCakes118

Files

30db589328c918ce61fe427a23130c66_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1cacafcdb9ee2e3035ddf42c448df9cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
GetAtomNameW
HeapSize
TlsSetValue
GetLocaleInfoA
GetDateFormatA
VirtualAlloc
RtlUnwind
SetFilePointer
TlsAlloc
MultiByteToWideChar
GetACP
GetConsoleOutputCP
EnumResourceNamesA
GetCPInfoExA
TlsGetValue
WriteConsoleA
SetStdHandle
GetTimeFormatA
IsValidCodePage
GetOEMCP
GetCPInfo
RaiseException

occache

FindControlClose

shlwapi

UrlUnescapeW
SHCreateStreamOnFileEx
PathIsFileSpecW
PathAppendW
PathIsContentTypeW
PathCreateFromUrlA

Sections

.text
Size: 90KB - Virtual size: 482KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ