5f77a3c3a9f4de1d72c0717ba5b21cf1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f77a3c3a9f4de1d72c0717ba5b21cf1_JaffaCakes118
Size

357KB
MD5

5f77a3c3a9f4de1d72c0717ba5b21cf1
SHA1

79b3d6962671c17870c348097be9b4383c438d8c
SHA256

0bfcf3ac6daaecaabb13b7f28073408f1b84b92894b95f246544b58fe8e8748d
SHA512

66ef176d1d815d047ebe5b6ef77ac5802133d7e616b7a442abdaac11a90456aebeaebe9d40fe4e89828e025ffd4a446767b8f6b7e8218167dbff29b4924c5f14
SSDEEP

6144:Hmbm9nFK7Ax+LYBrtSRbIqz+WSrLGj+wvjG+qhloMHDjFNz98t:HBMAxQ1bH8azq0SFNzGt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f77a3c3a9f4de1d72c0717ba5b21cf1_JaffaCakes118

Files

5f77a3c3a9f4de1d72c0717ba5b21cf1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f1c9145014fe952ab11299b1e9af4d27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExW
GetModuleHandleA
EnumResourceTypesW
LocalFree
FindClose
CreateEventA
GlobalLock
CancelIo
FreeConsole
GetSystemTime
IsDebuggerPresent
lstrlenA
CreateMutexA
GlobalUnlock
GetStdHandle
GetConsoleTitleA
CloseHandle
IsBadReadPtr
GetLastError
VirtualProtectEx

user32

GetMessageA
GetMessageA
EnumWindows
IsMenu
CreateWindowExA
GetDlgItemTextA
IsIconic
GetKeyState
LoadCursorA
GetSubMenu
GetParent
EndDialog
DialogBoxParamA
MessageBoxA

clbcatq

SetSetupOpen
ComPlusMigrate
GetCatalogObject
GetComputerObject
CheckMemoryGates

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ