30f1a9f2c0ad779cfb280446acae9e15_JaffaCakes118 | Triage

Sharing

General

Target

30f1a9f2c0ad779cfb280446acae9e15_JaffaCakes118
Size

83KB
MD5

30f1a9f2c0ad779cfb280446acae9e15
SHA1

477964d54a6366484ff067c186ce8b77457968dd
SHA256

d11b9ad0234eac2d487243f7487ac5f04ac6787eab1b2f0a3f3a621c3d024811
SHA512

19ea92134a840d036b69f8e24ad7a743f28ba55f01f548d5e809ab841b3ed42629a72025655b1c49143a928db407674ec366f671bb9fd0e5cad0291856c136bf
SSDEEP

1536:amoAtI6ihBgOHgWg0JSa2uSqDDJO1d3qxS6NwcgkHZclNpO7H4RuXof:amoAm6mgOW0sadOd3qxyKH2s7YRuXof

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30f1a9f2c0ad779cfb280446acae9e15_JaffaCakes118

Files

30f1a9f2c0ad779cfb280446acae9e15_JaffaCakes118
.exe windows:4 windows x86 arch:x86

876699cbe43193ca7d7cb6c9812e0bb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameA
ExitProcess
GetCurrentProcess
GetCurrentThread
GetEnvironmentVariableA
GetModuleFileNameA
GetProcAddress
CreateProcessA
GlobalAlloc
GlobalFree
LoadLibraryA
SetPriorityClass
SetThreadPriority
VirtualAlloc
VirtualFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 454B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE