fb336608ed5c28ed970379aa48e92968_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb336608ed5c28ed970379aa48e92968_JaffaCakes118
Size

47KB
MD5

fb336608ed5c28ed970379aa48e92968
SHA1

76ee7f4bdf9a588fc4383e3fd773c02b1674ad71
SHA256

a45a9979ac5bedfd49b34966cb175ae55e21c39571847dbc1ea01f9b7dc248ef
SHA512

67eefb0f3e31cd237564205aa7e7217f293cbc475a898b484f68cf8d0b0139f34592e5722753e63d15f6aa673fe6b838ac9f345cd9e7ba95f61c196781948d69
SSDEEP

768:/fBlIIl2gMlGCnyK1oPuS4T2pCt/W3G2wRWIB2CBsVjdynuFp:MIlVMnyWo4t/WFTIv+YO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb336608ed5c28ed970379aa48e92968_JaffaCakes118

Files

fb336608ed5c28ed970379aa48e92968_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81bdc6f6e3bd26e4bc8244abc259d49a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GetSystemTime
IsBadReadPtr
CancelIo
CreateEventA
FreeConsole
GetConsoleTitleW
GlobalLock
CreateMutexA
CloseHandle
VirtualProtectEx
FindClose
GetCPInfo
LoadLibraryExW
GetModuleHandleA
GetStdHandle
lstrlenA
GetACP
LocalFree
GetLastError

user32

IsIconic
IsMenu
ClipCursor
GetKeyState
GetMessageA
GetDlgItemTextA
DialogBoxParamA
CreateWindowExA
GetSubMenu
EndDialog
GetMessageA
GetParent
LoadCursorA
MessageBoxA

clbcatq

SetupSave
GetCatalogObject
ComPlusMigrate
GetComputerObject
CheckMemoryGates

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ