155a3f817a855d264596eff430ecd27c_JaffaCakes118 | Triage

Sharing

General

Target

155a3f817a855d264596eff430ecd27c_JaffaCakes118
Size

357KB
MD5

155a3f817a855d264596eff430ecd27c
SHA1

fe70f202d40cf805227887561eb848729f7aaa5c
SHA256

7fa70d4d92e0a1692312b20c953eea40915b472c4a5721ebc17580d7ceb63636
SHA512

c649a876aeee77389684ea6b46b997e35801cd398507932c17d05b275941e4276bd76f377bf66ca628ff3e032341f4a1a8a305128b853e6a4dd853e13e238da2
SSDEEP

6144:Lmbm9nFK7Ax+LYBrtSRbIqz+WSrLGj+wvjG+qhloMHDjFNz98t:LBMAxQ1bH8azq0SFNzGt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
155a3f817a855d264596eff430ecd27c_JaffaCakes118

Files

155a3f817a855d264596eff430ecd27c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f1c9145014fe952ab11299b1e9af4d27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExW
GetModuleHandleA
EnumResourceTypesW
LocalFree
FindClose
CreateEventA
GlobalLock
CancelIo
FreeConsole
GetSystemTime
IsDebuggerPresent
lstrlenA
CreateMutexA
GlobalUnlock
GetStdHandle
GetConsoleTitleA
CloseHandle
IsBadReadPtr
GetLastError
VirtualProtectEx

user32

GetMessageA
GetMessageA
EnumWindows
IsMenu
CreateWindowExA
GetDlgItemTextA
IsIconic
GetKeyState
LoadCursorA
GetSubMenu
GetParent
EndDialog
DialogBoxParamA
MessageBoxA

clbcatq

SetSetupOpen
ComPlusMigrate
GetCatalogObject
GetComputerObject
CheckMemoryGates

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ