29bdc9f7b628a9348adaec50ceb3f149_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

29bdc9f7b628a9348adaec50ceb3f149_JaffaCakes118
Size

23KB
MD5

29bdc9f7b628a9348adaec50ceb3f149
SHA1

9876c45f8ee4835906651e25ced8a892fa63bb52
SHA256

3ebc85b8c18611f519cce03c7424a464492de8b208e1172db375de92cf35ee2b
SHA512

fc04628ba7108524ffb952c27658e264a6f6509cdf1018988273311385ce4e78f366b8f8f4379431381609ffe5452003c0a360ff99d32d489860c9dbcbf02dd4
SSDEEP

384:u/70BlIq71RK4RzpSKeTKQITM3uwprSLLPx181J0qU:uoBlIepeTKQX+GSL5A0z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
29bdc9f7b628a9348adaec50ceb3f149_JaffaCakes118

Files

29bdc9f7b628a9348adaec50ceb3f149_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0c966909ebe6f3c5c4ae7bbf3c7640ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LocalFree
GlobalLock
CreateEventA
GetConsoleTitleW
GetCPInfo
IsBadReadPtr
CreateMutexA
GlobalUnlock
lstrlenA
GetACP
CloseHandle
CancelIo
LoadLibraryExW
FreeConsole
VirtualProtectEx
FindClose
GetSystemTime
GetStdHandle
GetLastError

user32

GetParent
CreateWindowExA
LoadCursorA
GetKeyState
GetMessageA
DialogBoxParamA
ClipCursor
IsIconic
GetSubMenu
GetDlgItemTextA
EndDialog
IsMenu
GetMessageA
MessageBoxA

clbcatq

GetCatalogObject
ComPlusMigrate
SetupSave
CheckMemoryGates
GetComputerObject

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ