30fea5b9358542cd4aea93fdc06ac145_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

30fea5b9358542cd4aea93fdc06ac145_JaffaCakes118
Size

341KB
MD5

30fea5b9358542cd4aea93fdc06ac145
SHA1

7b9d24fe46e3b4e2ac5f8c4ccce33b07458f524c
SHA256

4195dae8d046987be2c36052633b41e96f5ac64f9b0b6d7b72689ec2d925e5aa
SHA512

76d0ea0ffa9489722d1c396bf61380b30e1a8a3bf17119465eb019f585edaa3f67de6f48d5a22b9678531d178ca5eca8a3f159be19f0e2afd7a3c962b175c5dd
SSDEEP

6144:TmS7Spg1M7PyaQB74fo4UDblEzNENyRDUVpbCmV7WLXIqW:TduWCP/kMWDblsNjDmJWLu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
30fea5b9358542cd4aea93fdc06ac145_JaffaCakes118

Files

30fea5b9358542cd4aea93fdc06ac145_JaffaCakes118
.exe windows:4 windows x86 arch:x86

85bcde6b83d19afb48c4c335ed351c9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
GetLastError
FreeConsole
GetConsoleTitleA
CloseHandle
VirtualProtectEx
CreateEventA
GetSystemTime
GetStdHandle
GetModuleHandleA
IsDebuggerPresent
FindClose
EnumResourceTypesW
GlobalLock
GlobalUnlock
LoadLibraryExW
CancelIo
CreateMutexA
IsBadReadPtr
lstrlenA

user32

IsIconic
EnumWindows
GetParent
GetMessageA
LoadCursorA
GetKeyState
GetMessageA
DialogBoxParamA
EndDialog
GetDlgItemTextA
GetSubMenu
CreateWindowExA
IsMenu
MessageBoxA

clbcatq

SetSetupOpen
CheckMemoryGates
ComPlusMigrate
GetComputerObject
GetCatalogObject

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ