59e58df94757d45cda9ebffe40bb41cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59e58df94757d45cda9ebffe40bb41cc_JaffaCakes118
Size

341KB
MD5

59e58df94757d45cda9ebffe40bb41cc
SHA1

9a6af50e62f45475cc7b04e8542dc08ad0846600
SHA256

8c782abe3b1dcc40bf6fb7300efe08f21a9a5f9c33cc56012fe33e1cf2e3da45
SHA512

fc2a5ec7e999d9a61a4825acc1f653ddcee39c29949dbe28601e4f4d856d9812d2bcb8a89dc4851499d5612cf58f5737a75f8947d24daec40ef29cb3e73d8e7e
SSDEEP

6144:Hmb7Spg1M7PyaQB74fo4UDblEzNENyRDUVpbCmV7PEFM:HkuWCP/kMWDblsNjDmJIM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59e58df94757d45cda9ebffe40bb41cc_JaffaCakes118

Files

59e58df94757d45cda9ebffe40bb41cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7afe20fe67a080e9a03ea90c75b43e4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CancelIo
IsBadReadPtr
CreateMutexA
LoadLibraryExW
VirtualProtectEx
CreateEventA
GetModuleHandleA
lstrlenA
CloseHandle
EnumResourceTypesW
IsDebuggerPresent
GetStdHandle
GetConsoleTitleA
FindClose
GlobalLock
GetSystemTime
GetLastError
FreeConsole
LocalFree
GlobalUnlock

user32

IsMenu
DialogBoxParamA
GetKeyState
EnumWindows
CreateWindowExA
GetSubMenu
EndDialog
GetParent
LoadCursorA
IsIconic
GetDlgItemTextA
GetMessageA
GetMessageA
MessageBoxA

clbcatq

CheckMemoryGates
GetCatalogObject
SetSetupOpen
ComPlusMigrate
GetComputerObject

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ