63d38aec688c662350797c3f8d343f0c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63d38aec688c662350797c3f8d343f0c_JaffaCakes118
Size

251KB
MD5

63d38aec688c662350797c3f8d343f0c
SHA1

8e0254c1a5e805ce0a6e11c9a26f8cc1c861c3bb
SHA256

c47a7f7bc78bc6d87eef9d1bb35359a1c1be40497b5dba6e17214ba36168d1d8
SHA512

b9e5a0b121c37bf4d51d1b930707f041f325d72551a264ff497f1337bdebe1194f5edab96e368aa4209232fbcc8a24b50b5c37bd3452ae47b4fbcf6cb8956f02
SSDEEP

6144:/sfpUNv2Mg9PW5P1u5pbBoZDYmz7mXozLIxbEB:/sfpUZ2Ml1UXSAiLm6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63d38aec688c662350797c3f8d343f0c_JaffaCakes118

Files

63d38aec688c662350797c3f8d343f0c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7f5b2eb9b567a9d21cdee150727124c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CreateMutexA
GetACP
GetSystemTime
GetStdHandle
IsBadReadPtr
FreeConsole
lstrlenA
LocalFree
GetCPInfo
CreateEventA
FindClose
CloseHandle
GlobalLock
VirtualProtectEx
GetLastError
GetConsoleTitleW
GlobalUnlock
CancelIo
LoadLibraryExW

user32

DialogBoxParamA
ClipCursor
GetMessageA
GetMessageA
IsMenu
LoadCursorA
EndDialog
GetParent
GetDlgItemTextA
CreateWindowExA
IsIconic
GetKeyState
GetSubMenu
MessageBoxA

clbcatq

SetupSave
ComPlusMigrate
GetComputerObject
CheckMemoryGates
GetCatalogObject

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ