a86d71da5ae6121a95752254fbd18fe2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a86d71da5ae6121a95752254fbd18fe2_JaffaCakes118
Size

19KB
MD5

a86d71da5ae6121a95752254fbd18fe2
SHA1

4184abc651829caae84e54e2c2f159998f16ef87
SHA256

f0be170cd3d9b621ae759ccb4d7c4ce40f4f153e5d59665ba5fafec2b7f01c99
SHA512

3bc5f45819d3b0322da286768a192f7ffa628637ddc30e917d25d7db91b79580f9469abc4e3470acf80e4255ecc4296866ac1f339607cb3c73568ce2f39ea603
SSDEEP

384:K9wD0BlIq7IqD9ISxWqH7JDbEaINT8LWp59+DJ:K7BlIfyTf7INTtoD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a86d71da5ae6121a95752254fbd18fe2_JaffaCakes118

Files

a86d71da5ae6121a95752254fbd18fe2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7f5b2eb9b567a9d21cdee150727124c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
CreateMutexA
GetACP
GetSystemTime
GetStdHandle
IsBadReadPtr
FreeConsole
lstrlenA
LocalFree
GetCPInfo
CreateEventA
FindClose
CloseHandle
GlobalLock
VirtualProtectEx
GetLastError
GetConsoleTitleW
GlobalUnlock
CancelIo
LoadLibraryExW

user32

DialogBoxParamA
ClipCursor
GetMessageA
GetMessageA
IsMenu
LoadCursorA
EndDialog
GetParent
GetDlgItemTextA
CreateWindowExA
IsIconic
GetKeyState
GetSubMenu
MessageBoxA

clbcatq

SetupSave
ComPlusMigrate
GetComputerObject
CheckMemoryGates
GetCatalogObject

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ