ce261d6ffa74bc44471335147b7d5892_JaffaCakes118 | Triage

Sharing

General

Target

ce261d6ffa74bc44471335147b7d5892_JaffaCakes118
Size

341KB
MD5

ce261d6ffa74bc44471335147b7d5892
SHA1

04aee563b787bcf428c27c0bf406bea63be59390
SHA256

acdc94f62030324d5f042e972abd3947751c8e6b4068e7e055598e658e43c54f
SHA512

793b2f5b632e77d336a9b4cdae05c776572afa093cd2b998945bb7f7932dd15e35510b0fde515fc5159d7a2cba53673909b712c69e147c2a7e35f236f14d07f4
SSDEEP

6144:VmS7Spg1M7PyaQB74fo4UDblEzNENyRDUVpbCmV7WLXIqW:VduWCP/kMWDblsNjDmJWLu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce261d6ffa74bc44471335147b7d5892_JaffaCakes118

Files

ce261d6ffa74bc44471335147b7d5892_JaffaCakes118
.exe windows:4 windows x86 arch:x86

85bcde6b83d19afb48c4c335ed351c9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
GetLastError
FreeConsole
GetConsoleTitleA
CloseHandle
VirtualProtectEx
CreateEventA
GetSystemTime
GetStdHandle
GetModuleHandleA
IsDebuggerPresent
FindClose
EnumResourceTypesW
GlobalLock
GlobalUnlock
LoadLibraryExW
CancelIo
CreateMutexA
IsBadReadPtr
lstrlenA

user32

IsIconic
EnumWindows
GetParent
GetMessageA
LoadCursorA
GetKeyState
GetMessageA
DialogBoxParamA
EndDialog
GetDlgItemTextA
GetSubMenu
CreateWindowExA
IsMenu
MessageBoxA

clbcatq

SetSetupOpen
CheckMemoryGates
ComPlusMigrate
GetComputerObject
GetCatalogObject

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ