43c3b3d597bb2719339764c4ef13300c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43c3b3d597bb2719339764c4ef13300c_JaffaCakes118
Size

339KB
MD5

43c3b3d597bb2719339764c4ef13300c
SHA1

758931ef30d2e802cf7b32c50d65f0a4ceec1eaa
SHA256

ab9dfae8f1cf5ed8ae24525b64c1064e4da95e2da40574e60b46bf23bd31446d
SHA512

b894758281db3388ee2c84d2fa519d6fae3d7ea5c2649c2433ee62c94589babcb2d339ef75741313b6868a8c8ab0a1b76c43c94754aefae7a8d967518904865f
SSDEEP

6144:X1GLXTlatPj6kOIfQUurmB8Fl38uYyb4GZz6tJrFOqmEFQIS6qasCjy65OAVwEch:ELXTlyPjjOIYLmiRTkqzmBF50IS6Ls9d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43c3b3d597bb2719339764c4ef13300c_JaffaCakes118

Files

43c3b3d597bb2719339764c4ef13300c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8081d02c44645a9083ad10c88efc2742

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExW
CreateEventA
CreateMutexA
GetSystemTime
GetStdHandle
GlobalUnlock
FreeConsole
GlobalLock
GetLastError
FindClose
IsDebuggerPresent
VirtualProtectEx
CloseHandle
CancelIo
EnumResourceTypesW
IsBadReadPtr
LocalFree
GetModuleHandleA
GetConsoleTitleA
lstrlenA

user32

GetParent
CreateWindowExA
GetMessageA
DialogBoxParamA
LoadCursorA
GetMessageA
GetSubMenu
GetDlgItemTextA
IsMenu
GetKeyState
IsIconic
EndDialog
EnumWindows
MessageBoxA

clbcatq

GetComputerObject
ComPlusMigrate
GetCatalogObject
SetSetupOpen
CheckMemoryGates

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ