30d142e95778334f16d0fadeb9d84d53_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30d142e95778334f16d0fadeb9d84d53_JaffaCakes118
Size

698KB
MD5

30d142e95778334f16d0fadeb9d84d53
SHA1

226b2e2bb6d1ce81f850082faaaf3097f1b2e913
SHA256

0e21c4c8a73a50900007b289157cd255c3d7a0bce5b63f0815aa9a4e1d324539
SHA512

f29a8ef8a1fd33640b2b2f798bfe87791177d61208ccedde38de05a6cca8e7c0857dc90c6632b53a04bcc91f9dd392b7b160e682ed7b0a8b98f890b7145b3460
SSDEEP

12288:MmPdhSfWW8fFkJaRUb94RNVKOaYvlezPw/kcFc8XqczcY02QZYagKM8E:JAWZmWKOfezPnGcAv6Yx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30d142e95778334f16d0fadeb9d84d53_JaffaCakes118

Files

30d142e95778334f16d0fadeb9d84d53_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e7d6e2b1a006eae3d50d918bb784833

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetVersion
GetTickCount
GetLastError
GetVersionExA
lstrcpyA
lstrlenA
GetModuleHandleA
LocalFree
lstrcatA
Sleep
GetFileSize
GlobalFree
FreeLibrary
CloseHandle
GetStartupInfoA
GlobalAlloc
GetCommandLineA
CreateEventA

msvcrt

toupper
_adjust_fdiv
wcstoul
rand
__p__fmode
memmove
_exit
__CxxFrameHandler
wcschr
_acmdln
__setusermatherr
_except_handler3
wcslen

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 679KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ