30ad21e55a9ec33e285c77716efa3132_JaffaCakes118 | Triage

Sharing

General

Target

30ad21e55a9ec33e285c77716efa3132_JaffaCakes118
Size

83KB
MD5

30ad21e55a9ec33e285c77716efa3132
SHA1

a31910ca308e7e98ea88f68469e74f7b794cc31a
SHA256

562f4f3455ed4d3e17490960275a14a58a27343b97ad86821a2b1d4e1164a534
SHA512

2779e99e708ea947171a6a7ca86d011ecb11089d26231d0d9f4cb18c151c5cc259e8b641b15d7881f8b98df6756dc965fcfc0c4a7cb7bc857a2c967d925ea71d
SSDEEP

1536:2Iazv1ak/mDykpz6CO0wjEErxTWDTMqhGKYIZTET8bDQ:2lzv1ak/m7TwjBkMqhGKZTbbc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30ad21e55a9ec33e285c77716efa3132_JaffaCakes118

Files

30ad21e55a9ec33e285c77716efa3132_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df8e03394da635ff0fc46353dfa23891

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetProcessDEPPolicy
EncodeSystemPointer
WriteConsoleOutputAttribute
ReadConsoleOutputA
WriteTapemark
FlushConsoleInputBuffer
GetBinaryType
FatalAppExitW
ReleaseMutex
FindNextVolumeA
TerminateJobObject

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE