30f4c92a904a47e9f56602e46b1a972b_JaffaCakes118 | Triage

Sharing

General

Target

30f4c92a904a47e9f56602e46b1a972b_JaffaCakes118
Size

175KB
MD5

30f4c92a904a47e9f56602e46b1a972b
SHA1

319da297123f464aaafc8d7b5355c8b29a6b10f5
SHA256

a11452d3e4f510f7bbdced842a263aae5c4cf39978c78404de61141f79a8b0b0
SHA512

0bc301b2377ab4fc1fab1f91075ac4a1310eed7f0b19f3c76f1a8914c5505db834c3f09c90aa78e7a6b97043da432914ec91e411a98f364a49ff15978b9a2f11
SSDEEP

3072:5jT5YaGi+ukKpYd4hJU0hcpJ/meSBfwE52MqhrF/T:5XlGiVYd4hJUOcakr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30f4c92a904a47e9f56602e46b1a972b_JaffaCakes118

Files

30f4c92a904a47e9f56602e46b1a972b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

492b1efb33f84a3f1129d7164052c058

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

__setusermatherr
exit
__set_app_type
_except_handler3
__p__fmode
_XcptFilter
__p__commode
_acmdln
__getmainargs
log
_initterm
_adjust_fdiv

kernel32

GetModuleHandleA
GetStartupInfoA
VirtualProtect

user32

FindWindowA

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ