736599bf4ab84da11da48094f28da198_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

736599bf4ab84da11da48094f28da198_JaffaCakes118
Size

372KB
MD5

736599bf4ab84da11da48094f28da198
SHA1

bd47f90fb3b0b7c8923c43b33a124e744997fc14
SHA256

422981d18e4b261d79fcd9d97f1eb738d96cf97e0df59ddb676db93461978ed9
SHA512

7a9db517aceed02d0434eb9c0a3a6db41de4642a49e458ad9f384a90f2f805fcaa5db8400b87ed5bb705fdcb420895030cf06a00e39a4b8b5c4994c348caf0ba
SSDEEP

6144:K8aTRZreLaw8nmQWueyVgt/HcF06LiXShLfwys10lpzhhclNxyvM:taTneF8m4ewS/HcF+ih7wp10l1h+TxqM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
736599bf4ab84da11da48094f28da198_JaffaCakes118

Files

736599bf4ab84da11da48094f28da198_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b17e143dc94a6aff4b5604c0fcb28e01

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetModuleHandleW
FindVolumeClose
GlobalSize
ReleaseMutex
CloseHandle
VirtualAlloc
GetComputerNameW
GetDriveTypeA
GlobalFree
FreeConsole
SetEvent
CreateFileA
ExitThread
GetExitCodeProcess
ReadFile
GetPrivateProfileIntW
lstrlenA
GetLocalTime
LocalFree

user32

CreateWindowExA
EndDialog
CallWindowProcA
DispatchMessageA
GetClientRect
GetCaretPos
GetKeyState
DrawStateW
FillRect
GetDlgItem
GetMenu
GetClassInfoA
GetCursorInfo

clbcatq

ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
DllGetClassObject

msexch40

DllUnregisterServer

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ