435f9732a10dc396fb6a34be36b271f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

435f9732a10dc396fb6a34be36b271f7_JaffaCakes118
Size

352KB
MD5

435f9732a10dc396fb6a34be36b271f7
SHA1

4349327d5876d3c8d331190cf859292d96ecc69b
SHA256

bb5a84fe77bd4d3e39faac746516e20e52b60e680ed05f1e9ce17860711f6e41
SHA512

ed4e129166038a91e9554c390a00fad182810e3ae672a0ec367019f5d47ce4f5fef1f2c06ada80d6c66b59998e9d536e95007683b3186f37d9cc5976cad621e2
SSDEEP

6144:u6mQKVLZ/bdddjS6c+1qnvkkEc5uzuk1H2Fl9c3iCTXFAvL8Grd58sc9HcaVJoxa:u6uVLhs+1Os+501E7f6uwwT6p8y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
435f9732a10dc396fb6a34be36b271f7_JaffaCakes118

Files

435f9732a10dc396fb6a34be36b271f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

08a1de04d37dd402a03f46be19474da4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
GetModuleHandleA
IsBadReadPtr
GetSystemTime
lstrlenA
GetACP
GetLastError
GlobalLock
VirtualProtectEx
FreeConsole
CreateMutexA
LoadLibraryExW
GlobalUnlock
CreateEventA
GetConsoleTitleW
OpenMutexA
CloseHandle
GetStdHandle
LocalFree
CancelIo

user32

IsIconic
GetMessageA
GetDlgItemTextA
IsMenu
GetKeyState
DialogBoxParamA
CreateWindowExA
GetParent
ClipCursor
EndDialog
GetSubMenu
LoadCursorA
GetMessageA
MessageBoxA

clbcatq

ComPlusMigrate
CheckMemoryGates
GetComputerObject
GetCatalogObject
SetupSave

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ