4a4b90389b8132f920876ead57b67e23_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a4b90389b8132f920876ead57b67e23_JaffaCakes118
Size

341KB
MD5

4a4b90389b8132f920876ead57b67e23
SHA1

f4267cece4bd2208a4668e4251a8b7a998fa1b83
SHA256

bf54b06bb01868824b04ed39eae4bc2c5699600eda20d8b0eb6be12ad1504275
SHA512

e175e9404962faabd0ec20e031f6b2d67f49cf79ed7895828b70ee38da2ebe32f7849643e44115958d7b84c300071073f7e21c965f360fcee2801179b8cc945d
SSDEEP

6144:6mI7Spg1M7PyaQB74fo4UDblEzNENyRDUVpbCmV7k8H3sc2hr:67uWCP/kMWDblsNjDmJp3s7d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a4b90389b8132f920876ead57b67e23_JaffaCakes118

Files

4a4b90389b8132f920876ead57b67e23_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd8e5b3dfd8cd90dcea3a0a490991854

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceTypesW
GlobalLock
GetSystemTime
IsBadReadPtr
IsDebuggerPresent
VirtualProtectEx
FreeConsole
GetConsoleTitleA
GetStdHandle
GetLastError
LoadLibraryExW
CloseHandle
GlobalUnlock
CreateMutexA
LocalFree
CancelIo
FindClose
GetModuleHandleA
CreateEventA
lstrlenA

user32

DialogBoxParamA
LoadCursorA
GetKeyState
CreateWindowExA
GetSubMenu
GetParent
GetDlgItemTextA
GetMessageA
IsIconic
EnumWindows
EndDialog
IsMenu
GetMessageA
MessageBoxA

clbcatq

CheckMemoryGates
SetSetupOpen
GetComputerObject
GetCatalogObject
ComPlusMigrate

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ