30188b49fc6347bc05fe038a88bd2db6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30188b49fc6347bc05fe038a88bd2db6_JaffaCakes118
Size

171KB
MD5

30188b49fc6347bc05fe038a88bd2db6
SHA1

f7ee6bebf190ec0aa4b53eb1288c15245bc6f8d5
SHA256

63e0173dbf2a665303d6f5ab8a9cef649fdfa25c11ee439d571c61cf6350ffd9
SHA512

2a94f8fa0b398e3c02ea87b190cdb6f4fb9aa0dc1593374c2380f9ccd1664814f567b5c0366db77d3195bf193903cbc7f808a75e17e12d9c35e4cd4954676875
SSDEEP

3072:KZmVHYkEwlem4Z+EYJ6PNtXMU6JnEskGq1GbOGWVqRqgiHf1:UmCZm4i2XMBEs0sRq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30188b49fc6347bc05fe038a88bd2db6_JaffaCakes118

Files

30188b49fc6347bc05fe038a88bd2db6_JaffaCakes118
.dll windows:4 windows x86 arch:x86

0948df27bdc78985a52f03b090054439

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
ExitProcess
ExitThread
FindFirstFileA
FindResourceA
FreeLibrary
GetACP
GetCommandLineA
GetModuleHandleA
GetNumberFormatA
GetOEMCP
GetStartupInfoA
GetTimeFormatA
HeapAlloc
HeapCreate
HeapReAlloc
MultiByteToWideChar
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
VirtualFree
lstrlenW

msvcrt

strpbrk
printf
_XcptFilter
_cexit
vswprintf

user32

SetScrollInfo
PeekMessageA
GetSysColor
GetScrollInfo
GetMessageA
GetClassLongA
GetWindowRect

oleaut32

VarBstrCmp
SafeArrayDestroy

shlwapi

PathFindFileNameA
PathStripPathA
StrTrimA

Exports

Exports

GetSimpleTableDispenser
UninitializeStreaming
W32N_GetLastError

Sections

.text
Size: 103KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ