33d5865fffa6026e9e3fa91fb0e98e12_JaffaCakes118 | Triage

Sharing

General

Target

33d5865fffa6026e9e3fa91fb0e98e12_JaffaCakes118
Size

341KB
MD5

33d5865fffa6026e9e3fa91fb0e98e12
SHA1

6fbe2f0daba8b2fd6f5762494b06a8e8c4c53b7c
SHA256

3209a2c925adf0ed1b479fcb20d437f96554ab2b52ca064085cf5b6b5a08bd63
SHA512

66f3b2d178a1ad6ed0fb3266eaa6ed5401edb4408218391b2203b43e517861149efa14cb8fd0f9c96b571d403cfc0301adb93d731674995c41a6ad799edfd3ed
SSDEEP

6144:NCEm08v/zGmPuPkiWBupF6E7sssHe2qhCTmbFfKBLG9pcLLx7DYkqGvgMDsrzdf:NCENY/zG6vTBu3TC2JGLcpk7DYU4MDYd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
33d5865fffa6026e9e3fa91fb0e98e12_JaffaCakes118

Files

33d5865fffa6026e9e3fa91fb0e98e12_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81bdc6f6e3bd26e4bc8244abc259d49a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GetSystemTime
IsBadReadPtr
CancelIo
CreateEventA
FreeConsole
GetConsoleTitleW
GlobalLock
CreateMutexA
CloseHandle
VirtualProtectEx
FindClose
GetCPInfo
LoadLibraryExW
GetModuleHandleA
GetStdHandle
lstrlenA
GetACP
LocalFree
GetLastError

user32

IsIconic
IsMenu
ClipCursor
GetKeyState
GetMessageA
GetDlgItemTextA
DialogBoxParamA
CreateWindowExA
GetSubMenu
EndDialog
GetMessageA
GetParent
LoadCursorA
MessageBoxA

clbcatq

SetupSave
GetCatalogObject
ComPlusMigrate
GetComputerObject
CheckMemoryGates

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ