a8cdaed155dc87609d321e6b434c95a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8cdaed155dc87609d321e6b434c95a1_JaffaCakes118
Size

814KB
MD5

a8cdaed155dc87609d321e6b434c95a1
SHA1

fc7500b2ae32cd9a586ef4b6a75f02d85e718986
SHA256

54b861cbc59346d7e83fbe3d504c6e8091981118ac7787af98df4dd2b8ceae12
SHA512

d8ab59fdf8b1acaa6ffe2111c62f63fd66bfa2e0fd6af364b88cc8b0e4fe2cdb82052ca6e64f197f718141fabd5e42609a312b7aed9e9ba82ae80cd4b1005c33
SSDEEP

12288:j6IZlQywfLFzUsf/yE8ho6FBvCerDfgURF+DjrzH/HA6Gs27vzKC5xR7+6jqQ2mI:e6lQFfLFzV890qDoURAfH/g6jWT7+WqX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8cdaed155dc87609d321e6b434c95a1_JaffaCakes118

Files

a8cdaed155dc87609d321e6b434c95a1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f4a05bb2d7963a1acd1ee329ab8f807

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
CreateFileA
GlobalUnlock
Sleep
CreateFileMappingA
ExitProcess
GetACP
LocalFree
GetLastError
CloseHandle
FreeEnvironmentStringsA
TlsGetValue
GetModuleHandleA
HeapCreate
SleepEx
GetConsoleAliasW
LocalLock
FindAtomA
LoadLibraryExW
GetConsoleCP

user32

DrawFrame
FillRect
IsWindow
DrawEdge
DispatchMessageA
GetFocus
GetIconInfo
CopyRect
CheckRadioButton
GetDlgItem
CallWindowProcA
DefWindowProcW
GetDC
MessageBoxA

clbcatq

GetComputerObject
InprocServer32FromString
GetCatalogObject
SetSetupSave
SetSetupOpen

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ