21ffc7e9f07875b1ba7bfe52f96ad8e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

21ffc7e9f07875b1ba7bfe52f96ad8e5_JaffaCakes118
Size

341KB
MD5

21ffc7e9f07875b1ba7bfe52f96ad8e5
SHA1

8b539596a4980b766e26a51baa48f77d98821216
SHA256

85cf06d8171fac86740d0dfa2219f3590e0276f5c64d26da12a31f2dbdf44367
SHA512

c99853ce49bf78fcfbd9a0a0100d3ce67c4d30c314c71e31231506a8638c20b911c6a4e28298fc26df20f57bd8727cc157328ac54a386597adb32444bed3794d
SSDEEP

6144:Zma7Spg1M7PyaQB74fo4UDblEzNENyRDUVpbCmV7eRo:ZRuWCP/kMWDblsNjDmJea

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
21ffc7e9f07875b1ba7bfe52f96ad8e5_JaffaCakes118

Files

21ffc7e9f07875b1ba7bfe52f96ad8e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f41c32c44a293627b6bd57c1c515e1dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
lstrlenA
CancelIo
GetSystemTime
IsDebuggerPresent
GlobalUnlock
FindClose
EnumResourceTypesW
GetLastError
CreateMutexA
GetModuleHandleA
CloseHandle
FreeConsole
IsBadReadPtr
LocalFree
GetStdHandle
VirtualProtectEx
LoadLibraryExW
CreateEventA
GetConsoleTitleA

user32

LoadCursorA
IsIconic
GetParent
GetKeyState
DialogBoxParamA
GetMessageA
GetDlgItemTextA
CreateWindowExA
EnumWindows
EndDialog
GetSubMenu
GetMessageA
IsMenu
MessageBoxA

clbcatq

GetCatalogObject
ComPlusMigrate
CheckMemoryGates
GetComputerObject
SetSetupOpen

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ