30ed5209ba3e740dc625549437a27539_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30ed5209ba3e740dc625549437a27539_JaffaCakes118
Size

42KB
MD5

30ed5209ba3e740dc625549437a27539
SHA1

cd6408908946216bde34c42bf2cf3b35d9c731f7
SHA256

4c54a9207787b27938e2cda168b2f7665531ed804b391309bdf3e7ef43b6b9db
SHA512

6ab4480da4b7424f71d40f9c97278b690b0c7b5c87c7e507fdb09115eb1bb8b1040d32364e09bd21ae97056d72961849136c616c0934b44cc8c6778671d930ac
SSDEEP

768:K1samECi7cX9Wq1YHK4nULlRc5xQS/0/czSE3tJopGH4vUDb7dY/ChT1BexO6:K8E9QX9f1YqfLY/4ktGGH4sDbh0CPBR6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30ed5209ba3e740dc625549437a27539_JaffaCakes118

Files

30ed5209ba3e740dc625549437a27539_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b8d51733264ccfc6f244a7a4e3524b34

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
FindClose
GetDriveTypeA
GetEnvironmentStringsW
GetFileType
HeapAlloc
HeapCreate
SetHandleCount
WaitForSingleObject

msvcrt

setlocale
_wcsicmp
exit
time
_exit
realloc

user32

ExitWindowsEx
wsprintfA
TrackPopupMenu

oleaut32

SafeArrayDestroy
SafeArrayAccessData
RegisterTypeLi
OleTranslateColor
SysReAllocString
OleLoadPicturePath
GetErrorInfo
SysStringLen

shlwapi

PathAppendA
PathCombineA
PathFindOnPathA
SHQueryInfoKeyA
StrChrA
StrStrA
StrStrIA
SHOpenRegStreamA

Sections

.text
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ