32eef46cf0ff82ddc3858c374780b38f_JaffaCakes118 | Triage

Sharing

General

Target

32eef46cf0ff82ddc3858c374780b38f_JaffaCakes118
Size

155KB
MD5

32eef46cf0ff82ddc3858c374780b38f
SHA1

da94ccefd8dbb4a3b97a5c62f9b2c7a98fcfaf04
SHA256

ea776dd9f29ed2773e53e5fe418eb6d2035d48b367d2a15a23a1bb1ef7fc4568
SHA512

3cc82af8aac80e680f2f4d242212a1640b28067d41466e254a4c91065b04f94fd68f6cad7af38a99e9f8d28473b9a54be941c1705abb8562e84d5f454c13130a
SSDEEP

3072:9VwJAW0nTnlVctP1ZpWd9Chz4W+5a8OX0nCEKKu9rSUbs:nwJETlatPjpa8h9+5s0CnKcY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32eef46cf0ff82ddc3858c374780b38f_JaffaCakes118

Files

32eef46cf0ff82ddc3858c374780b38f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f1021cd10620eb9fc8dff99d154fc441

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
CreateMutexA
EnumResourceTypesW
CancelIo
FindClose
CreateEventA
GlobalLock
IsBadReadPtr
GetModuleHandleA
LocalFree
FreeConsole
VirtualProtectEx
GetSystemTime
LoadLibraryExW
CloseHandle
GetConsoleTitleA
IsDebuggerPresent
GetLastError
GlobalUnlock
GetStdHandle

user32

GetKeyState
GetDlgItemTextA
GetMessageA
IsMenu
GetMessageA
LoadCursorA
DialogBoxParamA
IsIconic
CreateWindowExA
EndDialog
EnumWindows
GetParent
GetSubMenu
MessageBoxA

clbcatq

ComPlusMigrate
GetComputerObject
GetCatalogObject
CheckMemoryGates
SetSetupOpen

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ