3ec9d0aa5f0ff275e7a0000e4961723b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ec9d0aa5f0ff275e7a0000e4961723b_JaffaCakes118
Size

355KB
MD5

3ec9d0aa5f0ff275e7a0000e4961723b
SHA1

7b62beb433cf540e2dce759b1b5942363a9f1216
SHA256

ef746d75d19c8bdd2ee057863529c629c1b196ab9f05cbdb703e59d552c51f79
SHA512

3ae201c975824b804fd64722e10cbd19259dfc2fbaba4c15799c68f61e1a7508aa94087a58626534c2defc25c141a2f589f0f772e7bf95a20a6b40bfaf074657
SSDEEP

6144:58fHxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVV2+:5iR9QI0Ay6fYvzEOe2KNSQ6l83zBzsu+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ec9d0aa5f0ff275e7a0000e4961723b_JaffaCakes118

Files

3ec9d0aa5f0ff275e7a0000e4961723b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9ad412d635f9ed70192b63d569b59cac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetDiskFreeSpaceW
CloseHandle
GetFileAttributesA
ResetEvent
GetSystemTime
GetTickCount
GetTickCount
ExitProcess
CreateFileA
SuspendThread
GetModuleHandleW
GetComputerNameW
LoadLibraryA
GetPrivateProfileIntA
FindAtomW
lstrlenA
GetCommandLineW
ResumeThread
LocalFree

user32

FillRect
GetClassInfoA
GetCaretPos
GetDlgItem
DrawStateA
CloseWindow
CallWindowProcA
CreateWindowExA
DispatchMessageA
GetClientRect
DestroyCaret
GetMenu
EndDialog

rasapi32

DwCloneEntry
DwEnumEntryDetails
DwRasUninitialize
RasDialA
RasDeleteEntryA

adsnt

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ