feb0a23e14d974f30a83c2590eafdb17_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

feb0a23e14d974f30a83c2590eafdb17_JaffaCakes118
Size

27KB
MD5

feb0a23e14d974f30a83c2590eafdb17
SHA1

954180abc9302f4925852bfad1c279c719cd5ac6
SHA256

fa8a7281429a1677b9fc09e6d07af1604896592b48cae8ce474b90923838c868
SHA512

46498a4347025d952e09b5e28ab46eb9045f5676e3408d0a72b186d18d0293736eb9abe670d1ad62f15d9510ab53329d15b4efe92219ba8aa0ec3409996a68e8
SSDEEP

384:jQufTJ6MbutxPDCz1YDaPlaHIA195ytB48uLEVVCJ9SCJ2pCa:jQuftPuDmla95yopLEVVCJgCJ2pCa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feb0a23e14d974f30a83c2590eafdb17_JaffaCakes118

Files

feb0a23e14d974f30a83c2590eafdb17_JaffaCakes118
.exe windows:4 windows x86 arch:x86

cf42c2a0dcc1420f237a0e0b92e599dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
LocalFree
IsBadReadPtr
VirtualProtectEx
IsDebuggerPresent
CreateMutexA
CloseHandle
LoadLibraryExW
FindClose
GetLastError
GetModuleHandleA
GlobalUnlock
GetStdHandle
lstrlenA
CreateEventA
GlobalLock
GetConsoleTitleA
EnumResourceTypesW
CancelIo
FreeConsole

user32

GetMessageA
IsMenu
GetSubMenu
CreateWindowExA
EnumWindows
GetKeyState
GetParent
GetMessageA
IsIconic
DialogBoxParamA
GetDlgItemTextA
EndDialog
LoadCursorA
MessageBoxA

clbcatq

CheckMemoryGates
GetComputerObject
GetCatalogObject
ComPlusMigrate
SetSetupOpen

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ