0599cc2a8e7b0662795a2e2debf1531d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0599cc2a8e7b0662795a2e2debf1531d_JaffaCakes118
Size

815KB
MD5

0599cc2a8e7b0662795a2e2debf1531d
SHA1

c4cb08826c31b507e11eb3703f693b83829e63fa
SHA256

88c9f2a63481b22485123c1d18326d939d9c53a978e4211558ca8e2149c8ebf4
SHA512

5d42a7a5c98065f419ca88bc15d58025633a625161065ef8b6342ea7a428fae9309548821f52f5b274d0f767bdaf424dc6618f69c136cd704479c45ee54637f8
SSDEEP

12288:ASeyJyfU+Dm7eEoa4Ng2RzztwYkV1aoQO6BjK1j/I+tQNcI3YhlmGdny+Vl7Wlhv:06eKc+TQdBjK1j/1tTl7vkLBlhVj7bhn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0599cc2a8e7b0662795a2e2debf1531d_JaffaCakes118

Files

0599cc2a8e7b0662795a2e2debf1531d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ec76b0bdf78fb910a1167ac4407574fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
GetConsoleAliasW
LocalLock
LoadLibraryExA
CloseHandle
Sleep
GetConsoleCP
TlsGetValue
HeapCreate
GlobalUnlock
WaitNamedPipeA
GetACP
CreateFileMappingA
FindAtomA
ExitProcess
GetLastError
CreateFileA
LocalFree
FreeEnvironmentStringsA
GetModuleHandleA

user32

DispatchMessageA
CopyRect
DrawTextA
GetIconInfo
CheckRadioButton
DrawEdge
FillRect
IsWindow
DefWindowProcW
SetFocus
GetDlgItem
GetDC
CallWindowProcA
MessageBoxA

clbcatq

SetSetupSave
SetSetupOpen
GetComputerObject
InprocServer32FromString
GetCatalogObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ