1572a5e53109a892056b296151dcb9fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1572a5e53109a892056b296151dcb9fc_JaffaCakes118
Size

9KB
MD5

1572a5e53109a892056b296151dcb9fc
SHA1

f645824dba5eb0321bd91708985a4ed710f52042
SHA256

fd801094652c070617dc869a1a49055d98bba137463497d2e291ac5efbc24168
SHA512

27b2fafec268924f63d23c4f94868c0694ce6f274b9f199c7c84f4bab3b73d0143f5961e52e5a0fef5bc69169379d1aec57b9d8e743973abd0fd62637c7286aa
SSDEEP

192:T+9wFdRThCbBdnIq7OfqD9IgP+cGLcpriarSfL:K9wD0BlIq7IqD9ISOLUiHL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1572a5e53109a892056b296151dcb9fc_JaffaCakes118

Files

1572a5e53109a892056b296151dcb9fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7f5b2eb9b567a9d21cdee150727124c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CreateMutexA
GetACP
GetSystemTime
GetStdHandle
IsBadReadPtr
FreeConsole
lstrlenA
LocalFree
GetCPInfo
CreateEventA
FindClose
CloseHandle
GlobalLock
VirtualProtectEx
GetLastError
GetConsoleTitleW
GlobalUnlock
CancelIo
LoadLibraryExW

user32

DialogBoxParamA
ClipCursor
GetMessageA
GetMessageA
IsMenu
LoadCursorA
EndDialog
GetParent
GetDlgItemTextA
CreateWindowExA
IsIconic
GetKeyState
GetSubMenu
MessageBoxA

clbcatq

SetupSave
ComPlusMigrate
GetComputerObject
CheckMemoryGates
GetCatalogObject

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ