10c8bd27396b8affebdfd0cbe74e3172_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10c8bd27396b8affebdfd0cbe74e3172_JaffaCakes118
Size

372KB
MD5

10c8bd27396b8affebdfd0cbe74e3172
SHA1

a0bd087aa46618b27612dd4f5336aa6b461dc258
SHA256

76233158ba0e111f59ec23075ee11861c507969f17820b6f30781f827710b98b
SHA512

d8b787190ad650544984bb37fc16383dfb1e12b8c6da8ffd9eb74f4810cf69a064a0ff9f4d1f51086f50c07a83d6a4faec82b67138e3e16cec8f5e1d356c390f
SSDEEP

6144:6hjjvjVcVAC2FXgEr8fE0ASg3/YQvRNMVlJi41fv4Dw:6hnvjVkCrSvoZNyl5fwD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10c8bd27396b8affebdfd0cbe74e3172_JaffaCakes118

Files

10c8bd27396b8affebdfd0cbe74e3172_JaffaCakes118
.exe windows:4 windows x86 arch:x86

be6394ae6a776e67ad73fb197903efce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetModuleHandleW
GlobalSize
ReleaseMutex
SetEvent
GetPrivateProfileIntW
GlobalFree
ExitThread
CreateFileW
GetTickCount
FindVolumeClose
GetDriveTypeA
GetExitCodeProcess
LocalFree
VirtualAlloc
ReadFile
CloseHandle
lstrlenA
FreeConsole
GetComputerNameW

user32

GetDlgItem
DispatchMessageA
GetKeyState
GetSysColor
GetMenu
EndDialog
CallWindowProcA
SetFocus
GetCursorInfo
GetClassInfoA
DrawStateW
CreateWindowExA
GetClientRect

clbcatq

ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
ComPlusMigrate
DllGetClassObject

ntshrui

IsPathSharedA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 424KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ