3f09429fafb32122c609014b2aea4920_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f09429fafb32122c609014b2aea4920_JaffaCakes118
Size

352KB
MD5

3f09429fafb32122c609014b2aea4920
SHA1

1c6ba484fe39a4a06614123f23c55e7d04ee36de
SHA256

0351692ee648ee78dd65baf6478f46d765688a1a638c4f46014c4d64a0677778
SHA512

e4cdb5c99599c955eba64f391e58b9041e98b173e8f177c6ac45c7e4ed4283559b153ee8bee72269ed605e6cc651a03af819772b0434edbcf754d5c56400008e
SSDEEP

6144:4mGg2t5Acd07AfV9xZF3pRaUyLN7XT7iUOo1TCmv1V4UvZZCKkDnUPmrfF+:4FTwc/PRaUyLNTOU7TZ5HkDqmrY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f09429fafb32122c609014b2aea4920_JaffaCakes118

Files

3f09429fafb32122c609014b2aea4920_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d0a5f81eb2519f325926a7c363c0025b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
GlobalUnlock
GetLastError
LoadLibraryExW
CreateEventA
IsBadReadPtr
EnumResourceTypesW
CancelIo
FreeConsole
GetSystemTime
CloseHandle
GlobalLock
VirtualProtectEx
LocalFree
GetConsoleTitleA
GetStdHandle
CreateMutexA
lstrlenA
GetModuleHandleA
FindClose

user32

GetMessageA
DialogBoxParamA
EndDialog
IsIconic
GetKeyState
EnumWindows
GetSubMenu
IsMenu
CreateWindowExA
GetMessageA
GetParent
LoadCursorA
GetDlgItemTextA
MessageBoxA

clbcatq

GetCatalogObject
GetComputerObject
CheckMemoryGates
SetSetupOpen
ComPlusMigrate

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ