32e9c4619bb1c7cddb991074c3b3c704_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32e9c4619bb1c7cddb991074c3b3c704_JaffaCakes118
Size

339KB
MD5

32e9c4619bb1c7cddb991074c3b3c704
SHA1

202016bdd37af28fa0df2041ee7f19c0cf58ed1f
SHA256

2481b9ec36736465040069eeada1b2099aafe1dabaa7392710f6c5a0d3a0c31f
SHA512

9ac19ed7e504db2473dbe5eb05e5d8300df5ce255ee51e5de208cece2b89291158ea156f58f9ffa88322540ce54a7ca91bdaa8b0c1741d0adce9fca57865a709
SSDEEP

6144:KXTlatPj6kOIfQUurmB8Fl38uYyb4GZz6tJrFOqmEFQIS6qasCjy65OAVwEch:KXTlyPjjOIYLmiRTkqzmBF50IS6Ls96w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32e9c4619bb1c7cddb991074c3b3c704_JaffaCakes118

Files

32e9c4619bb1c7cddb991074c3b3c704_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8081d02c44645a9083ad10c88efc2742

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExW
CreateEventA
CreateMutexA
GetSystemTime
GetStdHandle
GlobalUnlock
FreeConsole
GlobalLock
GetLastError
FindClose
IsDebuggerPresent
VirtualProtectEx
CloseHandle
CancelIo
EnumResourceTypesW
IsBadReadPtr
LocalFree
GetModuleHandleA
GetConsoleTitleA
lstrlenA

user32

GetParent
CreateWindowExA
GetMessageA
DialogBoxParamA
LoadCursorA
GetMessageA
GetSubMenu
GetDlgItemTextA
IsMenu
GetKeyState
IsIconic
EndDialog
EnumWindows
MessageBoxA

clbcatq

GetComputerObject
ComPlusMigrate
GetCatalogObject
SetSetupOpen
CheckMemoryGates

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ