30f43ab12b34c94647b37c22d3c6c726_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30f43ab12b34c94647b37c22d3c6c726_JaffaCakes118
Size

118KB
MD5

30f43ab12b34c94647b37c22d3c6c726
SHA1

2154d4da71e3408a2c425d093aa149276b9028aa
SHA256

dd754a4b3dff482f887dd94ae102f584633d1f27cf68310ed86466f5c9222e17
SHA512

113232e2a6b9a8d8c09ece1fddebec33af90d7a5e1bb56a35887bce0f18b49cc5b76fcc52e228fc14758bc1e7a86416e2d5054d2229125008b9699414d740e5e
SSDEEP

3072:qec9cdR5MbbKGINqrx4OdgcHFJzHTCIdV9Z/A:Ag5obKGSqyOdXv7T77K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30f43ab12b34c94647b37c22d3c6c726_JaffaCakes118

Files

30f43ab12b34c94647b37c22d3c6c726_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dc19e10eacce193ce6d23063fcb13b63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnableScrollBar
GetTopWindow
GetActiveWindow
EndPaint
IsMenu
EnumChildWindows
LoadIconA
IsWindowEnabled
LoadCursorA
CreatePopupMenu

kernel32

LoadLibraryA
VirtualFree
WideCharToMultiByte
GetThreadLocale
WaitForSingleObject
VirtualAllocEx
VirtualAlloc
SizeofResource
VirtualQuery
GetCommandLineA

shell32

Shell_NotifyIconW
Shell_NotifyIconA
DragQueryFileA
SHGetFolderPathA

Exports

Exports

aaUhu1gEcsZtg@8

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data
.rdata
.rsrc/0/DIALOG/TEXTFILEDLG
.rsrc/0/MANIFEST/1
.xml
.rsrc/0/RCDATA/DVCLAL
.rsrc/0/STRING/4094
.rsrc/0/STRING/4095
.rsrc/1033/BITMAP/BBABORT.bmp
.rsrc/1033/version.txt
.text