8940d3e03160c656d8f22028ce2dcb7e_JaffaCakes118 | Triage

Sharing

General

Target

8940d3e03160c656d8f22028ce2dcb7e_JaffaCakes118
Size

355KB
MD5

8940d3e03160c656d8f22028ce2dcb7e
SHA1

1854818a74ed87d40f20688231104c2ed5c09a47
SHA256

1c19bbdf98d7682ec3d30332c8e396d97485b6471b6a2e3700e73a91af3caa36
SHA512

3ef852c7cbf6966814e5930867cc1250fe37470a6f3aac55a5c99ab26870fc456f287f0e37252b4def322734c2bf0e9da89aa56583c805357f51f93db08fb043
SSDEEP

6144:qpHxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVV2Ir:qpR9QI0Ay6fYvzEOe2KNSQ6l83zBzsu+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8940d3e03160c656d8f22028ce2dcb7e_JaffaCakes118

Files

8940d3e03160c656d8f22028ce2dcb7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b3ef2afddc8567823c0c877b04d25ee6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
ExitProcess
GetCommandLineW
GetSystemTime
GetComputerNameW
ResetEvent
CreateFileA
GetTickCount
GetFileAttributesA
FindAtomW
GetModuleHandleW
ResumeThread
CloseHandle
VirtualAlloc
SuspendThread
LoadLibraryA
GetTickCount
LocalFree
GetDiskFreeSpaceW
GetPrivateProfileIntA

user32

GetDlgItem
GetCaretPos
GetClassInfoA
CloseWindow
DrawStateA
DispatchMessageA
GetClientRect
CallWindowProcA
CreateWindowExA
GetMenu
FillRect
EndDialog
DestroyCaret

rasapi32

RasDialA
RasDeleteEntryA
DwEnumEntryDetails
DwRasUninitialize
DwCloneEntry

adsnt

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ