30efb4286ae4a761eb072136cd90e618_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30efb4286ae4a761eb072136cd90e618_JaffaCakes118
Size

113KB
MD5

30efb4286ae4a761eb072136cd90e618
SHA1

d7a685ca5fff01f6c0c2bda0246a797c02f50d84
SHA256

7bc246de45172d00e162997b4d009c4803bc120928d50035d950f57c1f85256f
SHA512

fa773b2c67b9bc77eddc1c7f2dfb427d8f7c850a2772ccbd6aa1b295acdc7e4ddb8e7434cd43c274939ac84a063300b26ae1b5ee09650b68321298b248f280e9
SSDEEP

3072:9TN9wQn0aXF30by4Xqrg2hOSe/vJOrxYuNDJZHigUet8qrPNHRuq:xN9R0GEdXqMGi/RaYYbayrPpR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30efb4286ae4a761eb072136cd90e618_JaffaCakes118

Files

30efb4286ae4a761eb072136cd90e618_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f116ffea91f8c90acd8b0038b5d5ce73

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetActiveWindow
EndDialog
EnumDesktopsA
OemKeyScan
ValidateRect
SetPropA
DialogBoxParamA
SetWindowPos
IsCharAlphaNumericW

ole32

CoFreeLibrary
CoAllowSetForegroundWindow
OleFlushClipboard

kernel32

GetCurrentProcessId
CopyFileW
CreateProcessW
HeapDestroy
SetFileAttributesA
AddAtomW
DeleteAtom
HeapFree
LocalAlloc
LocalFree
GetProcAddress
LoadLibraryA
GetStartupInfoA
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
InitializeSListHead
LoadLibraryExW
GlobalMemoryStatus

Sections

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ