b4cb9cced77245a813aa4227db35bc7a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4cb9cced77245a813aa4227db35bc7a_JaffaCakes118
Size

355KB
MD5

b4cb9cced77245a813aa4227db35bc7a
SHA1

32846dd0573344bf8d45b8f47d24382e2f66353f
SHA256

71a399744a7252f85b6041aed611d5fb599ec513da0e20d731444a188f954fbc
SHA512

991755c3f939d5b3e188ad1366ccebe07a79ed6ccc559bc8f011fa3605f46538c93f7dff8f91746402f673276aace1ee187ed15d62cef9ef93e2fa53f3582809
SSDEEP

6144:XSGbHxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVVT:CGbR9QI0Ay6fYvzEOe2KNSQ6l83zBzsb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4cb9cced77245a813aa4227db35bc7a_JaffaCakes118

Files

b4cb9cced77245a813aa4227db35bc7a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

37d3a2bfee5fa11197686c1286f02136

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ResetEvent
GetFileAttributesA
lstrlenA
FindAtomW
GetSystemTime
GetTickCount
GetDiskFreeSpaceW
GetModuleHandleW
GetCommandLineW
CloseHandle
LoadLibraryA
LocalFree
SuspendThread
VirtualAlloc
GetComputerNameW
ResumeThread
GetPrivateProfileIntA
GetTickCount
ExitProcess

user32

DestroyCaret
CreateWindowExA
CloseWindow
GetMenu
DrawStateA
GetDlgItem
GetClassInfoA
DispatchMessageA
GetCaretPos
FillRect
EndDialog
CallWindowProcA
GetClientRect

rasapi32

RasDialA
DwCloneEntry
RasDeleteEntryA
DwEnumEntryDetails
DwRasUninitialize

adsnt

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ