b44c93dbd6e07bf88c16579101b015d1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b44c93dbd6e07bf88c16579101b015d1_JaffaCakes118
Size

341KB
MD5

b44c93dbd6e07bf88c16579101b015d1
SHA1

a8d3f5b3249f6ef7e5921a477cf60f2d78c2f6f9
SHA256

4976564fa2285cedb7b36c740f658989d620a2346bff84c272a366c0761328a6
SHA512

644e15fe1834e881748d0b91143fac5e808cfc62460e7eb33a290a20331a4121eaa34e1eb9f3b8448133dd9d7d5e24141644d1c882ec5ab259d9d953481fafc7
SSDEEP

6144:wmC7Spg1M7PyaQB74fo4UDblEzNENyRDUVpbCmV799qxzSiUY:wRuWCP/kMWDblsNjDmJnqx26

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b44c93dbd6e07bf88c16579101b015d1_JaffaCakes118

Files

b44c93dbd6e07bf88c16579101b015d1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1f1981a81076aef2a2ea2089420cd38e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
EnumResourceTypesW
FreeConsole
IsDebuggerPresent
GetConsoleTitleA
CreateEventA
lstrlenA
GlobalLock
IsBadReadPtr
GlobalUnlock
VirtualProtectEx
LocalFree
GetStdHandle
FindClose
CloseHandle
GetSystemTime
CreateMutexA
GetModuleHandleA
CancelIo
LoadLibraryExW

user32

GetKeyState
GetSubMenu
EnumWindows
GetParent
CreateWindowExA
IsMenu
GetMessageA
EndDialog
GetMessageA
IsIconic
DialogBoxParamA
GetDlgItemTextA
LoadCursorA
MessageBoxA

clbcatq

GetComputerObject
SetSetupOpen
CheckMemoryGates
ComPlusMigrate
GetCatalogObject

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ