6a849a1cc0252a4fa30c9f56875f9c2d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a849a1cc0252a4fa30c9f56875f9c2d_JaffaCakes118
Size

355KB
MD5

6a849a1cc0252a4fa30c9f56875f9c2d
SHA1

f7c70e1446232a363d3e977f408030135e922814
SHA256

d97e69347897454df24c4ef4ed2d002036b1b8896a86e1249e4ac022bd0bbb23
SHA512

a8e0a1c6d1ec8a8d4007a7d446897c18d89547773f921e97172fcc642463c418201bb210907f6ed286a398d229ef55f6529240e247c54975de41c065e425e291
SSDEEP

6144:XSgbHxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVVT:CgbR9QI0Ay6fYvzEOe2KNSQ6l83zBzsb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a849a1cc0252a4fa30c9f56875f9c2d_JaffaCakes118

Files

6a849a1cc0252a4fa30c9f56875f9c2d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37d3a2bfee5fa11197686c1286f02136

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ResetEvent
GetFileAttributesA
lstrlenA
FindAtomW
GetSystemTime
GetTickCount
GetDiskFreeSpaceW
GetModuleHandleW
GetCommandLineW
CloseHandle
LoadLibraryA
LocalFree
SuspendThread
VirtualAlloc
GetComputerNameW
ResumeThread
GetPrivateProfileIntA
GetTickCount
ExitProcess

user32

DestroyCaret
CreateWindowExA
CloseWindow
GetMenu
DrawStateA
GetDlgItem
GetClassInfoA
DispatchMessageA
GetCaretPos
FillRect
EndDialog
CallWindowProcA
GetClientRect

rasapi32

RasDialA
DwCloneEntry
RasDeleteEntryA
DwEnumEntryDetails
DwRasUninitialize

adsnt

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ