30eeb0a8ba2616bba544d4920c7c867b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30eeb0a8ba2616bba544d4920c7c867b_JaffaCakes118
Size

42KB
MD5

30eeb0a8ba2616bba544d4920c7c867b
SHA1

93238e9988ee9550010cb2810700d3574279dd84
SHA256

956fe11d8b7794d2d7a581135c90afa9475ca34aae3380639a97a749c0c5f6cc
SHA512

81d0828064f756f637afa1b63f05c3dea56917e17f0185e8320e58274b946045ba98569e1db8c106cd0e243d01f0a30282829ecfc5eabd8b3f14ef337fac495a
SSDEEP

768:TQpp9BxlC4Y2CDcndXEGSy/5HDWHeDHCkC5HVYPCv:TQpp9BtndX7SyhjCewHyP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30eeb0a8ba2616bba544d4920c7c867b_JaffaCakes118

Files

30eeb0a8ba2616bba544d4920c7c867b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d8c43172213c11d76c24ef31d37fd491

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
HeapAlloc
GetProcAddress
GetModuleHandleA
LoadLibraryA

user32

EndPaint
EndMenu
EndDialog
EndDeferWindowPos
EnumChildWindows
EnableScrollBar
EnableMenuItem
EmptyClipboard
CloseClipboard
ClipCursor
ClientToScreen
ChildWindowFromPointEx
ChildWindowFromPoint
DialogBoxParamW
CreateDialogParamW
EnableWindow

advapi32

RegOpenKeyW
RegOpenKeyA

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ