8b7800ea467a3470e49dff40fe0b54d9_JaffaCakes118 | Triage

Sharing

General

Target

8b7800ea467a3470e49dff40fe0b54d9_JaffaCakes118
Size

13KB
MD5

8b7800ea467a3470e49dff40fe0b54d9
SHA1

638db1b67f5b050848a19371c9a03eff44be1390
SHA256

38544ec8f9a869ec2e16eba5481978249b0b1ad0006593ff4bd17313162818e6
SHA512

5a5b48f78cd38245ee7c5792a67bd0b1d5704b264364b13910d48e42c2881c15db6e267c941fe6c485369d4eedcc073b471b9fa15b327df4c6198f9dcb57c94d
SSDEEP

192:/frKp8KdRThCbBdnIq7OI0skD0+MARIK/t4JicDCb0MAMvlKD+sO:/frE840BlIq7B0skD0itW2b0MvlKDs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b7800ea467a3470e49dff40fe0b54d9_JaffaCakes118

Files

8b7800ea467a3470e49dff40fe0b54d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81bdc6f6e3bd26e4bc8244abc259d49a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GetSystemTime
IsBadReadPtr
CancelIo
CreateEventA
FreeConsole
GetConsoleTitleW
GlobalLock
CreateMutexA
CloseHandle
VirtualProtectEx
FindClose
GetCPInfo
LoadLibraryExW
GetModuleHandleA
GetStdHandle
lstrlenA
GetACP
LocalFree
GetLastError

user32

IsIconic
IsMenu
ClipCursor
GetKeyState
GetMessageA
GetDlgItemTextA
DialogBoxParamA
CreateWindowExA
GetSubMenu
EndDialog
GetMessageA
GetParent
LoadCursorA
MessageBoxA

clbcatq

SetupSave
GetCatalogObject
ComPlusMigrate
GetComputerObject
CheckMemoryGates

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ