abb3671fae3bb13ad955169c069bddbe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abb3671fae3bb13ad955169c069bddbe_JaffaCakes118
Size

341KB
MD5

abb3671fae3bb13ad955169c069bddbe
SHA1

45dde7dfb1b7aff7d3550537e86eb9321b9d9660
SHA256

35d325f6356fda0c4e36ff6ddbe67707995206f7395ce97d94d6a4ed2cc01e91
SHA512

086e22148c99692e09e7cffcc466affcfe94cb325ab76d7bb51562ef079c25680714ca21a1d56b1a024d8b3220bc67b7eaa9184d6947883b97952b73db90c907
SSDEEP

6144:Ime7Spg1M7PyaQB74fo4UDblEzNENyRDUVpbCmV7GMi:IhuWCP/kMWDblsNjDmJI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abb3671fae3bb13ad955169c069bddbe_JaffaCakes118

Files

abb3671fae3bb13ad955169c069bddbe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

44cd0c0a87c493ce8de1aecb7215fd72

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
CloseHandle
LoadLibraryExW
VirtualProtectEx
CreateMutexA
FindClose
IsDebuggerPresent
GetConsoleTitleA
lstrlenA
GlobalUnlock
EnumResourceTypesW
FreeConsole
LocalFree
CancelIo
GetStdHandle
CreateEventA
GetSystemTime
GetModuleHandleA
GlobalLock
GetLastError

user32

GetDlgItemTextA
GetKeyState
GetMessageA
LoadCursorA
IsMenu
EnumWindows
GetParent
DialogBoxParamA
IsIconic
GetMessageA
GetSubMenu
CreateWindowExA
EndDialog
MessageBoxA

clbcatq

GetCatalogObject
GetComputerObject
SetSetupOpen
CheckMemoryGates
ComPlusMigrate

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ