00302dac69dab64fc137d1490d3bf830_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00302dac69dab64fc137d1490d3bf830_JaffaCakes118
Size

301KB
MD5

00302dac69dab64fc137d1490d3bf830
SHA1

ac7a5867068ac5329defb47e3212ca005f5d4fd5
SHA256

767543b25ab367ed745bc385146ab5beee7719eeec3b0d3ed25e2c62ee041c70
SHA512

e2c9867d6766da14675e1d789f46e2c521e2e373361a5bce6f6119349b68cb16172e413301c6a276a0e7af74e41b3eebf89fabe47769c08cc591fec25c3af44f
SSDEEP

6144:cMdcbBWGBQWraG5ctJ7WRwID4rVhVa+R+ZgB9H5+2:NdcbB/PnWtJ7WRwID4U+vj5+2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00302dac69dab64fc137d1490d3bf830_JaffaCakes118

Files

00302dac69dab64fc137d1490d3bf830_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2a209db4ab354745f9e70a707a852033

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
IsValidLocale
CreateMailslotW
GetModuleFileNameA
HeapCreate
CreateNamedPipeW
SetLastError
GetStartupInfoA
GetStdHandle
lstrcmpiW
DeleteFileA
GetConsoleAliasA
lstrcmpiW
FileTimeToLocalFileTime
lstrcmpiW
GetCommState
lstrcmpiW
GetLogicalDriveStringsW
lstrcmpiW
Sleep
GetProcessHeap
GetModuleHandleA
GetVolumePathNameW

scecli

SceSysPrep
SceOpenPolicy
DeltaNotify
InitializeChangeNotify

Sections

.text
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ