30e9fe5b5f0f3518426e2256961f304a_JaffaCakes118 | Triage

Sharing

General

Target

30e9fe5b5f0f3518426e2256961f304a_JaffaCakes118
Size

72KB
MD5

30e9fe5b5f0f3518426e2256961f304a
SHA1

7568835015d1b75a305080275ad341e6414b0e52
SHA256

39ca27ddbed373ab065607c1611edcc1f82fe3472769a11b16f4929ed2f86a36
SHA512

64d37c1f04c1cd0ec4e1d0387a7c49100f995fb905b857705cbd25373362400bcf422906d6ab9a0fea5e3c13236721d96c201193b2ef4deb35409617817c9853
SSDEEP

1536:WPthLi4D/3CToVawDKnJMiI9UL1x9KTQwef/:WPth/KToswDKnJvIKL1mif/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30e9fe5b5f0f3518426e2256961f304a_JaffaCakes118

Files

30e9fe5b5f0f3518426e2256961f304a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

04703311888cf8ecc7d97ba836ec0898

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
strcmp
fopen
__p__commode
_initterm
_XcptFilter
_onexit
fwrite
fprintf
__getmainargs
strlen
exit
malloc
fclose
_acmdln
_adjust_fdiv
sin
_exit
free
__setusermatherr
__set_app_type

user32

GetDesktopWindow

kernel32

GetModuleHandleW
GetStartupInfoA

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ