4d4538e9f3744776a189ec497a4ba2a0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d4538e9f3744776a189ec497a4ba2a0_JaffaCakes118
Size

21KB
MD5

4d4538e9f3744776a189ec497a4ba2a0
SHA1

9a516fc1e86b2a92e7b35101bdc9178323733f42
SHA256

13498938369b99022dfc7315840632287bd73dd504d2898162bd9991bc9ff54b
SHA512

5a5d042264dcfa7018d39f1ec24d1222983c9f5479fed817169c6251fad0e52c683f6bddfed6e1ab90a8f229aee64edbb164b6997a4b801269c50b60679942c3
SSDEEP

384:qiBNnJWqstnfJTaU9jnn264qbX6z787GR:BJIT3D264qbX6PR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d4538e9f3744776a189ec497a4ba2a0_JaffaCakes118

Files

4d4538e9f3744776a189ec497a4ba2a0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d0a5f81eb2519f325926a7c363c0025b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
GlobalUnlock
GetLastError
LoadLibraryExW
CreateEventA
IsBadReadPtr
EnumResourceTypesW
CancelIo
FreeConsole
GetSystemTime
CloseHandle
GlobalLock
VirtualProtectEx
LocalFree
GetConsoleTitleA
GetStdHandle
CreateMutexA
lstrlenA
GetModuleHandleA
FindClose

user32

GetMessageA
DialogBoxParamA
EndDialog
IsIconic
GetKeyState
EnumWindows
GetSubMenu
IsMenu
CreateWindowExA
GetMessageA
GetParent
LoadCursorA
GetDlgItemTextA
MessageBoxA

clbcatq

GetCatalogObject
GetComputerObject
CheckMemoryGates
SetSetupOpen
ComPlusMigrate

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ