30b489946b46bc23a8b74a3c2ae58f41_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30b489946b46bc23a8b74a3c2ae58f41_JaffaCakes118
Size

118KB
MD5

30b489946b46bc23a8b74a3c2ae58f41
SHA1

6a0f0ad2980ccc26c2525943a80ad5cfcdd41748
SHA256

db88187532c9b3293eba05dcfe4f2aa05d6fbefe7116ba5a47fce3b9219d8323
SHA512

56303723f40f681294ba2c972d321d60150ba428de7da82124e1f8e5c56c2cd74201b3c26f5ad3d335ae943747bf108fca41e9ba230b4be355f5a26cd1cb89f1
SSDEEP

1536:YmUxXTqaj5IAIbkQ1uGSPhe15HzYFkS2ZOKS36ZFUxqWISrjdeEdAwP1Sn8nAiOx:YmUx2ajkbFxSPiq4OKkEFrWlRtqYMsW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30b489946b46bc23a8b74a3c2ae58f41_JaffaCakes118

Files

30b489946b46bc23a8b74a3c2ae58f41_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5c359d915e92b69ba3623e52314cdb71

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetNextVDMCommand
GetProcAddress
GetProfileSectionW
SetSystemPowerState

user32

GetDlgItemTextW
DdeQueryNextServer
EnumDisplayDevicesA
DialogBoxIndirectParamAorW
PeekMessageA

Sections

.text
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 513B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ