07398123b6043b57100f9d3c09b71a4d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07398123b6043b57100f9d3c09b71a4d_JaffaCakes118
Size

238KB
MD5

07398123b6043b57100f9d3c09b71a4d
SHA1

cde03868694673a66da979126389473446382150
SHA256

135197c9a8b9d9b5dc38fd0e7b1a60a65b8800d7dc2d98cadb87808571405065
SHA512

a213c0ddc33a808f7a302803c8bb7324752df547f6f72ece615d3c5744add69bf95739e16c1186275a81e2d59a2d89ed9fb09c0c2ed775db09e6663862bc3e8a
SSDEEP

6144:t/MKPQdwxKzV6fLQcJwZU1uwIcUWQK/5AS2RS:pMKPQd8nfLQcYAuMUWQK/5ASF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07398123b6043b57100f9d3c09b71a4d_JaffaCakes118

Files

07398123b6043b57100f9d3c09b71a4d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e54b6da457e400a243b19401595bd7f0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
LoadLibraryExW
LocalFree
GlobalLock
FreeConsole
CancelIo
VirtualProtectEx
FindClose
GetLastError
IsBadReadPtr
GetConsoleTitleA
CloseHandle
IsDebuggerPresent
GlobalUnlock
EnumResourceTypesW
lstrlenA
GetSystemTime
GetStdHandle
GetModuleHandleA
CreateEventA

user32

GetParent
LoadCursorA
GetMessageA
CreateWindowExA
GetSubMenu
GetDlgItemTextA
IsIconic
GetMessageA
DialogBoxParamA
GetKeyState
EnumWindows
EndDialog
IsMenu
MessageBoxA

clbcatq

CheckMemoryGates
GetComputerObject
ComPlusMigrate
SetSetupOpen
GetCatalogObject

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ