a513fb6862355dce637cdae7ae6d2a3d_JaffaCakes118 | Triage

Sharing

General

Target

a513fb6862355dce637cdae7ae6d2a3d_JaffaCakes118
Size

30KB
MD5

a513fb6862355dce637cdae7ae6d2a3d
SHA1

5b13693ec8cac6dcfc0585bec33d53b46adef998
SHA256

b5106b16002209d55f0d31ecad350c82011730c7624f1f0ff771312060b75486
SHA512

3ad9492c9c60bc5f9170832e199ac761702b37b870288a33aa748e6a2f07688474f31ae235db3c918cbb3b2382ea9098dbb843d9c2021c47b217e528d833df89
SSDEEP

384:/frE840BlIq7D0skD0Uoc+1p8GbrcymcVKYZIrcaaZSTG17y2pCpdJvdgd:/fBlIKlMo9+e32rhePy2pCti

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a513fb6862355dce637cdae7ae6d2a3d_JaffaCakes118

Files

a513fb6862355dce637cdae7ae6d2a3d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81bdc6f6e3bd26e4bc8244abc259d49a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GetSystemTime
IsBadReadPtr
CancelIo
CreateEventA
FreeConsole
GetConsoleTitleW
GlobalLock
CreateMutexA
CloseHandle
VirtualProtectEx
FindClose
GetCPInfo
LoadLibraryExW
GetModuleHandleA
GetStdHandle
lstrlenA
GetACP
LocalFree
GetLastError

user32

IsIconic
IsMenu
ClipCursor
GetKeyState
GetMessageA
GetDlgItemTextA
DialogBoxParamA
CreateWindowExA
GetSubMenu
EndDialog
GetMessageA
GetParent
LoadCursorA
MessageBoxA

clbcatq

SetupSave
GetCatalogObject
ComPlusMigrate
GetComputerObject
CheckMemoryGates

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ