30e26e2d9a4a9d301de2ec7353a5704b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30e26e2d9a4a9d301de2ec7353a5704b_JaffaCakes118
Size

96KB
MD5

30e26e2d9a4a9d301de2ec7353a5704b
SHA1

f0c44d450695c71e56ddd7d8f2a3115c5fa74f45
SHA256

c28adda704471e87854f30e8d86d20692ac11a5c684eac81335293a8034c837e
SHA512

9408ea2ea4b844731c52a11e55337df093b430a6295fa9145a36108c2eaa5d0548d4284699da5ac3d4d55bcc04a7865bff1759a878d2e832fb752dd15a1c3f5a
SSDEEP

3072:FUVv6CC45cPuHUwp1b/YplBF8TNlFxypR:FUVSkqWH1pZYpYFxypR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30e26e2d9a4a9d301de2ec7353a5704b_JaffaCakes118

Files

30e26e2d9a4a9d301de2ec7353a5704b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

48ae0cc262861eba4723cad29506eab3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
CreateFileA
GetWindowsDirectoryA
LoadLibraryW

msvcrt

memcpy

advapi32

RegOpenKeyExW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g3
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ