30e6ba81b1e4c2de845ec2ddc320680b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30e6ba81b1e4c2de845ec2ddc320680b_JaffaCakes118
Size

70KB
MD5

30e6ba81b1e4c2de845ec2ddc320680b
SHA1

346dcb960d97cb00455fad2743d0084cc42ab3ef
SHA256

5748ac983a0961d8ad290ad91837872205fdd4afcaccc7f47d162492b3daf572
SHA512

d4eba7288c81f9bcee0995e3616e5bdc2777ecf5e694717d9afc54f1974dd990ce3aa62f8e99f4b909e38986df5b1be55bf93deaa55449a4334aa71ec97a1682
SSDEEP

768:I1CyvTS3Jub0XwY0sMOM7+OHEWPNVr3g290/oykqV3KOYvaFndTb+KVrRd9R5:IXu9jNepwLlrAal9b1D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30e6ba81b1e4c2de845ec2ddc320680b_JaffaCakes118

Files

30e6ba81b1e4c2de845ec2ddc320680b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

6f5bca5174d1bf998210e6197e266554

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetProcAddress
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
SearchPathA
GetCurrentProcessId
CreateProcessA
GetStartupInfoA

msvcrt

_cexit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
_exit
_c_exit
exit

advapi32

RegQueryValueExA
RegOpenKeyExA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 66KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ysadjin
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE