5ccbe6a4e829eaf0bcc7adec8098845a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ccbe6a4e829eaf0bcc7adec8098845a_JaffaCakes118
Size

341KB
MD5

5ccbe6a4e829eaf0bcc7adec8098845a
SHA1

c7d2e0edb5a6cbe788e41cdc8af3df337c4dfbd2
SHA256

5a27101418f6b19d3e67701f5ebb0d871346ccfdd79f9a96b628141239523311
SHA512

4ff076007d44766f80ae34c1993cca1187281015a10a1842eed61b71c936b1cea473f36a658a3a7d7e134476c27b1b21de0df00fc595a2d83959fe8ffc5869ff
SSDEEP

6144:Dmq7Spg1M7PyaQB74fo4UDblEzNENyRDUVpbCmV7An76J:DBuWCP/kMWDblsNjDmJC76J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ccbe6a4e829eaf0bcc7adec8098845a_JaffaCakes118

Files

5ccbe6a4e829eaf0bcc7adec8098845a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9bcf67779019ff84b751896054f6affd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
LoadLibraryExW
FreeConsole
GetSystemTime
CreateEventA
GetModuleHandleA
lstrlenA
CloseHandle
IsDebuggerPresent
VirtualProtectEx
GetConsoleTitleA
GlobalUnlock
FindClose
CancelIo
CreateMutexA
GetLastError
IsBadReadPtr
EnumResourceTypesW
GlobalLock
GetStdHandle

user32

EndDialog
DialogBoxParamA
EnumWindows
LoadCursorA
IsMenu
GetKeyState
CreateWindowExA
GetMessageA
IsIconic
GetParent
GetSubMenu
GetDlgItemTextA
GetMessageA
MessageBoxA

clbcatq

GetCatalogObject
SetSetupOpen
ComPlusMigrate
CheckMemoryGates
GetComputerObject

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ