9515f9b7de90dbce7294054477cd529a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9515f9b7de90dbce7294054477cd529a_JaffaCakes118
Size

352KB
MD5

9515f9b7de90dbce7294054477cd529a
SHA1

6f9c20cd0d306c4291467b9cf47d9e0df0e69a71
SHA256

36a687ea07debb17db388a0168fc7ab116eb32741613ad825f2121339608e634
SHA512

2f9fd1b98ad73d8fb2970f99e102da831dda710cd87ce0d91d5e3e78278eba952cfcf14ecaf9a4d93e8dfcd6d417c30430f51cf7c5fce1e138c5fdf5ee6367a6
SSDEEP

6144:vXmcKVLZ/bdddjS6c+1qnvkkEc5uzuk1H2Fl9c3iCTXFAvL8Grd58sc9HcaVJcNW:vXeVLhs+1Os+501E7f6uwwT6cNPO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9515f9b7de90dbce7294054477cd529a_JaffaCakes118

Files

9515f9b7de90dbce7294054477cd529a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b92785793f2fe721c9f1164f4bcd33f0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetModuleHandleA
GlobalLock
LoadLibraryExW
GetSystemTime
CreateEventA
FreeConsole
GetLastError
GetACP
lstrlenA
FindClose
CreateMutexA
GlobalUnlock
OpenMutexA
IsBadReadPtr
GetConsoleTitleW
LocalFlags
LocalFree
GetStdHandle
VirtualProtectEx

user32

DialogBoxParamA
GetKeyState
LoadCursorA
CreateWindowExA
GetMessageA
EndDialog
GetMessageA
ClipCursor
IsMenu
GetDlgItemTextA
IsIconic
GetParent
GetSubMenu
MessageBoxA

clbcatq

GetComputerObject
SetupSave
CheckMemoryGates
ComPlusMigrate
GetCatalogObject

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ