35db37279711c031be14fb67d5290787_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35db37279711c031be14fb67d5290787_JaffaCakes118
Size

355KB
MD5

35db37279711c031be14fb67d5290787
SHA1

2ffc122dc87756fff5bef008d248bdc882de53fa
SHA256

55f99ad2f3601315dc2b0789c963cf3fc92b3650762335d2ef2f801bc4e3091b
SHA512

857184717a3f52d1b3fdb688e3cdbda6e1fdfd4da36509972e55449a87d4d5a82e4c24e8ac5ac43e303d0dbcf1899b5da50b09cb02a750ce5afd0c7e958160c9
SSDEEP

6144:XS4bHxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVVT:C4bR9QI0Ay6fYvzEOe2KNSQ6l83zBzsb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35db37279711c031be14fb67d5290787_JaffaCakes118

Files

35db37279711c031be14fb67d5290787_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37d3a2bfee5fa11197686c1286f02136

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ResetEvent
GetFileAttributesA
lstrlenA
FindAtomW
GetSystemTime
GetTickCount
GetDiskFreeSpaceW
GetModuleHandleW
GetCommandLineW
CloseHandle
LoadLibraryA
LocalFree
SuspendThread
VirtualAlloc
GetComputerNameW
ResumeThread
GetPrivateProfileIntA
GetTickCount
ExitProcess

user32

DestroyCaret
CreateWindowExA
CloseWindow
GetMenu
DrawStateA
GetDlgItem
GetClassInfoA
DispatchMessageA
GetCaretPos
FillRect
EndDialog
CallWindowProcA
GetClientRect

rasapi32

RasDialA
DwCloneEntry
RasDeleteEntryA
DwEnumEntryDetails
DwRasUninitialize

adsnt

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ