f9c6d961ec5cac2be586591e09d5fb7f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9c6d961ec5cac2be586591e09d5fb7f_JaffaCakes118
Size

40KB
MD5

f9c6d961ec5cac2be586591e09d5fb7f
SHA1

670a9bbafc2522976ff1d5f95ea5030882cf33c9
SHA256

54e19692aaf6db265e43426d37b4a9602b0a2c0d94d2d4a13d43d871647b9228
SHA512

0f2ce54f769ba0192b7d4957bc60b928d2997787c306f057962bb9e83dd80a7b786fbc708c7d73eecc73f318f3685d8dd13f7c012f9404cddae1f94f7ffc2e4b
SSDEEP

768:AnYBlIcO3eiuenKJuS08pej0pN2pCt/W:U9c4nueKJrLGUU4t/W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9c6d961ec5cac2be586591e09d5fb7f_JaffaCakes118

Files

f9c6d961ec5cac2be586591e09d5fb7f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ab3b8d0383ed69c55a39dd1e1a7dbbf5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetCPInfo
FreeConsole
GetACP
GetConsoleTitleW
CreateEventA
lstrlenA
GlobalLock
IsBadReadPtr
GlobalUnlock
VirtualProtectEx
LocalFree
GetStdHandle
FindClose
CloseHandle
GetSystemTime
CreateMutexA
GetModuleHandleA
CancelIo
LoadLibraryExW

user32

GetKeyState
GetSubMenu
ClipCursor
GetParent
CreateWindowExA
IsMenu
GetMessageA
EndDialog
GetMessageA
IsIconic
DialogBoxParamA
GetDlgItemTextA
LoadCursorA
MessageBoxA

clbcatq

GetComputerObject
SetupSave
CheckMemoryGates
ComPlusMigrate
GetCatalogObject

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ