3a8ba4ff1ef58a77f9d87279cea9cae7_JaffaCakes118 | Triage

Sharing

General

Target

3a8ba4ff1ef58a77f9d87279cea9cae7_JaffaCakes118
Size

338KB
MD5

3a8ba4ff1ef58a77f9d87279cea9cae7
SHA1

b61f405ba027463e36dbd9dbdd807baa478bc8d8
SHA256

f00b13b7033046e4310fea37a2a78d059d5bd306f51163d4ae9d07a50f01dd7a
SHA512

34f98cb1c6ce210e4fe449253585418485d32791f4c048deb47cb2434d94526470c100724260e66a1e1cb8ad919f8b82198d1eb5226f37f64820a33699a2afa5
SSDEEP

6144:SK3gD7Q/ss0etUTxQi6+2ECoD/lXV5CDx2j8vuJWdq5XI6go/rWU7F2:SV02A872ER/LQlubNgoiUk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a8ba4ff1ef58a77f9d87279cea9cae7_JaffaCakes118

Files

3a8ba4ff1ef58a77f9d87279cea9cae7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9022e7d4c7e515b3de18af3a412815da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
LoadLibraryExW
LocalFree
GlobalLock
FreeConsole
LocalFlags
VirtualProtectEx
FindClose
GetLastError
IsBadReadPtr
GetConsoleTitleW
CloseHandle
GetACP
GlobalUnlock
OpenMutexA
lstrlenA
GetSystemTime
GetStdHandle
GetModuleHandleA
CreateEventA

user32

GetParent
LoadCursorA
GetMessageA
CreateWindowExA
GetSubMenu
GetDlgItemTextA
IsIconic
GetMessageA
DialogBoxParamA
GetKeyState
ClipCursor
EndDialog
IsMenu
MessageBoxA

clbcatq

CheckMemoryGates
GetComputerObject
ComPlusMigrate
SetupSave
GetCatalogObject

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ