feb920a08da1d8069b4ff5d2c2f94ad9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

feb920a08da1d8069b4ff5d2c2f94ad9_JaffaCakes118
Size

311KB
MD5

feb920a08da1d8069b4ff5d2c2f94ad9
SHA1

b18e0476aea457a1fb78b5314b8867a809b8d205
SHA256

98b46443c28d5cf4777f2d27570492ad7b1fda918c80ffd33d1566b291a06c2e
SHA512

294de52def541a0e94455d6948114abf0f8f1b8c90750fe4e28acc4d4346a454e10051cd799ccf7037be5a5894f685105038e5b66ce03c9e71271c3d94a5d63b
SSDEEP

6144:nmujQ/ssiP1UetW4zR16JA83N85l+ecQEN2u2dyBo/r4U:nmusc1tWU1cjd858vHo0U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
feb920a08da1d8069b4ff5d2c2f94ad9_JaffaCakes118

Files

feb920a08da1d8069b4ff5d2c2f94ad9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

994af8f35aa9aeb95102009a108dafc0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
GlobalLock
CreateMutexA
lstrlenA
CloseHandle
GetStdHandle
GetSystemTime
GetConsoleTitleW
IsBadReadPtr
LoadLibraryExW
GetACP
VirtualProtectEx
CancelIo
GetLastError
GlobalUnlock
GetCPInfo
FindClose
CreateEventA
FreeConsole
GetModuleHandleA

user32

LoadCursorA
IsIconic
GetDlgItemTextA
CreateWindowExA
GetKeyState
IsMenu
GetMessageA
GetSubMenu
GetParent
EndDialog
ClipCursor
DialogBoxParamA
GetMessageA
MessageBoxA

clbcatq

CheckMemoryGates
SetupSave
GetComputerObject
ComPlusMigrate
GetCatalogObject

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ