db9fb326a7357fd639117729f9a999ea_JaffaCakes118 | Triage

Sharing

General

Target

db9fb326a7357fd639117729f9a999ea_JaffaCakes118
Size

341KB
MD5

db9fb326a7357fd639117729f9a999ea
SHA1

78d3a4e28fed3dc4321d722f11067afd81c50f1f
SHA256

850ed6a375bb6ee55050a74ac7a4686eee75fdd707f2463fdb1a027e0c004fd5
SHA512

1ed0a9c503463cb0f937c0b6bf59b14e4c9853727e68608a8dd4133ccd70c5229eecee005a5730a5f9dc97c34d6dd321daef15a77f731ff32fab33cc04360931
SSDEEP

6144:BmS7Spg1M7PyaQB74fo4UDblEzNENyRDUVpbCmV7WLXIqW:BduWCP/kMWDblsNjDmJWLu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db9fb326a7357fd639117729f9a999ea_JaffaCakes118

Files

db9fb326a7357fd639117729f9a999ea_JaffaCakes118
.exe windows:4 windows x86 arch:x86

85bcde6b83d19afb48c4c335ed351c9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
GetLastError
FreeConsole
GetConsoleTitleA
CloseHandle
VirtualProtectEx
CreateEventA
GetSystemTime
GetStdHandle
GetModuleHandleA
IsDebuggerPresent
FindClose
EnumResourceTypesW
GlobalLock
GlobalUnlock
LoadLibraryExW
CancelIo
CreateMutexA
IsBadReadPtr
lstrlenA

user32

IsIconic
EnumWindows
GetParent
GetMessageA
LoadCursorA
GetKeyState
GetMessageA
DialogBoxParamA
EndDialog
GetDlgItemTextA
GetSubMenu
CreateWindowExA
IsMenu
MessageBoxA

clbcatq

SetSetupOpen
CheckMemoryGates
ComPlusMigrate
GetComputerObject
GetCatalogObject

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ