e0ef17bb8d6027f3a7f994d58578bf4f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0ef17bb8d6027f3a7f994d58578bf4f_JaffaCakes118
Size

355KB
MD5

e0ef17bb8d6027f3a7f994d58578bf4f
SHA1

0e253e8692a434831f253b75dcd9531cf1e63f68
SHA256

57c1eb8d7f6d63a29469f452f22cc692f149f5856f97ca3b57032fad45484555
SHA512

fff64236bfc222c483d2b5dfeeea1457f4757a7c1e6f0c06fe33eb5faa148c8ade46514e3de20fe39213ff10ffc90169508ca74c5b314baffaa4e787a6bee064
SSDEEP

6144:qESHxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVV2+:qESR9QI0Ay6fYvzEOe2KNSQ6l83zBzsb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0ef17bb8d6027f3a7f994d58578bf4f_JaffaCakes118

Files

e0ef17bb8d6027f3a7f994d58578bf4f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e7a1aa49bfca19169aca596a1f61fc3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
LocalFree
lstrlenA
LoadLibraryA
CloseHandle
GetTickCount
CreateFileA
GetModuleHandleW
GetCommandLineW
GetComputerNameW
ExitProcess
ResetEvent
GetPrivateProfileIntA
VirtualAlloc
FindAtomW
ResumeThread
GetDiskFreeSpaceW
SuspendThread
GetTickCount
GetSystemTime

user32

CallWindowProcA
CreateWindowExA
GetCaretPos
CloseWindow
GetClientRect
DispatchMessageA
GetDlgItem
GetClassInfoA
DestroyCaret
DrawStateA
EndDialog
GetMenu
FillRect

rasapi32

DwRasUninitialize
DwCloneEntry
RasDialA
RasDeleteEntryA
DwEnumEntryDetails

adsnt

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ