8294c2a805a029c73de0201585633548_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8294c2a805a029c73de0201585633548_JaffaCakes118
Size

339KB
MD5

8294c2a805a029c73de0201585633548
SHA1

966dcf83306763d46804e436b334db55ad785d5d
SHA256

b1502f3d046c7da28b73e7cd56e93b3867c1f7898517ca5f396b5ea0e539f4ad
SHA512

5fd68cbc097d0df977126efb4436f671978f3441c961bdcc3e6f70bcb98a1241ffc619d3cd8aa1f91c7fe6fc359715157de50f3e8c03eec68f120e2d049fc3fa
SSDEEP

6144:x6uRQ/ssXyHIjWrbp6YwWPTiLNwDL8jTWnaAk7bCh/IZpuQNoPG:x6uaByoSrbp6YwT+DETLF7bCh/IZMQNR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8294c2a805a029c73de0201585633548_JaffaCakes118

Files

8294c2a805a029c73de0201585633548_JaffaCakes118
.exe windows:4 windows x86 arch:x86

865e82253762fc1e6d1f7ca1c42c9d59

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetModuleHandleA
GetSystemTime
lstrlenA
VirtualProtectEx
GetStdHandle
CreateEventA
GlobalLock
GetACP
GetLastError
FreeConsole
LocalFree
GetCPInfo
GetConsoleTitleW
CancelIo
GlobalUnlock
LoadLibraryExW
CreateMutexA
FindClose
IsBadReadPtr

user32

GetSubMenu
LoadCursorA
IsIconic
GetMessageA
GetDlgItemTextA
DialogBoxParamA
EndDialog
IsMenu
GetKeyState
ClipCursor
GetParent
GetMessageA
CreateWindowExA
MessageBoxA

clbcatq

SetupSave
GetComputerObject
GetCatalogObject
ComPlusMigrate
CheckMemoryGates

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ