0a1095d221182bef9ce03618062b7dc8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0a1095d221182bef9ce03618062b7dc8_JaffaCakes118
Size

304KB
MD5

0a1095d221182bef9ce03618062b7dc8
SHA1

69eb46dc6ad31655359daa9fed552ac1f8d3d2c2
SHA256

91d519c7a390825b7c0c30b60a1b3929aea46ac8423157040b6a124e6f450e33
SHA512

765485b6bc28b357ca4744afeb3711128781f6302b3ec59bfb61aaf85714ca575e04194feec2a5dcc91a0ede502717645050c4915f8ead623da2b64da5ae5275
SSDEEP

6144:jyfZa38CoBz8kvercTkyb+4A/xICMQ5zIxVtaHoh7ku0+jMYvRb:jyfZJF8wrky6/xHVI1aHotN025b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a1095d221182bef9ce03618062b7dc8_JaffaCakes118

Files

0a1095d221182bef9ce03618062b7dc8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8f29d17702b040e46c3e8971368ffb6c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
ResetEvent
ExitProcess
GetTickCount
CreateFileA
GetDriveTypeW
GetCommandLineW
CloseHandle
lstrlenA
GetModuleHandleW
GetFileAttributesA
LocalFree
FindAtomW
ReleaseMutex
GetComputerNameW
GetSystemTime
GetTickCount
LoadLibraryA
GetDiskFreeSpaceW
VirtualAlloc

user32

CloseWindow
DispatchMessageA
GetMenu
GetClientRect
CreateWindowExA
GetCaretPos
DrawStateA
CallWindowProcA
EndDialog
DestroyCaret
GetClassInfoA
FillRect
GetDlgItem

rasapi32

DwCloneEntry
RasDialA
DwRasUninitialize
RasDeleteEntryA
DwEnumEntryDetails

adsnt

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 348KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 294KB - Virtual size: 294KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ