3ad8f43dc1ca881cc7da5b7c4e94f0bc_JaffaCakes118 | Triage

Sharing

General

Target

3ad8f43dc1ca881cc7da5b7c4e94f0bc_JaffaCakes118
Size

12KB
MD5

3ad8f43dc1ca881cc7da5b7c4e94f0bc
SHA1

4202439083e4a039428d6e296634d007549aa30f
SHA256

fa932f2e72cf024e448790f7dd9e0170cc342fc4f6e7deb6b3e5a3eabad41555
SHA512

8ebca006ee4016193d9ee12a8b4f983a167db342c4ee4d8bc4caea9740fbdb1875232889d3811a1752c9798b55af51fb014c98a5749cd9596373fad3d7e2c0c7
SSDEEP

384:c/bXmFvLRhYwKeiXlIhBxuT+EXb/FxFHex3b:c/b2vLRhYwTiXlIhBxq+EXb/FxFHexr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ad8f43dc1ca881cc7da5b7c4e94f0bc_JaffaCakes118

Files

3ad8f43dc1ca881cc7da5b7c4e94f0bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fc421680428e883e36b30375e3f391ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PeekMessageA
TranslateMessage
DispatchMessageA
EnableWindow
LoadIconA
LoadCursorA
RegisterClassExA
RegisterClassA
DefDlgProcA
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
SetWindowTextA
CharUpperBuffA
DefWindowProcA
PostQuitMessage

kernel32

GetStartupInfoA
GetCommandLineA
GetProcessHeap
GetModuleHandleA
CreateThread
lstrcmpiA
EnterCriticalSection
ResetEvent
WaitForMultipleObjects
GetTickCount
LeaveCriticalSection
SetEvent
ExitProcess
SetFilePointer
ReadFile
HeapAlloc
CloseHandle
CreateFileA
lstrlenA
Sleep
GetModuleFileNameA
lstrcmpA
GetProcessId
lstrcpyA
CreateEventA
InitializeCriticalSection

rasapi32

RasGetErrorStringA
RasEnumEntriesA
RasGetEntryPropertiesA
RasDialA
RasEnumDevicesA
RasSetEntryPropertiesA
RasHangUpA
RasEnumConnectionsA
RasGetConnectStatusA

comctl32

ord17

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE