ef24e6b740e1792224effcfae1a642ad_JaffaCakes118 | Triage

Sharing

General

Target

ef24e6b740e1792224effcfae1a642ad_JaffaCakes118
Size

355KB
MD5

ef24e6b740e1792224effcfae1a642ad
SHA1

a58f45ca09e774145fe266a274b1282a3b0f5442
SHA256

ee255f5cb365e5be87230758996413eb38309c137a849ae4dc72116c072ed25c
SHA512

feb7ba2e4ba89bf2449ba9ce53a0202c4e29c3ed6e93faa77cbc1ff400a401f1e209aba496144ef72da12700c17d57e0b5e4b79b5ff309c6131cd86a0749ca9e
SSDEEP

6144:q3HxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVV2Ir:q3R9QI0Ay6fYvzEOe2KNSQ6l83zBzsu+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef24e6b740e1792224effcfae1a642ad_JaffaCakes118

Files

ef24e6b740e1792224effcfae1a642ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b3ef2afddc8567823c0c877b04d25ee6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
ExitProcess
GetCommandLineW
GetSystemTime
GetComputerNameW
ResetEvent
CreateFileA
GetTickCount
GetFileAttributesA
FindAtomW
GetModuleHandleW
ResumeThread
CloseHandle
VirtualAlloc
SuspendThread
LoadLibraryA
GetTickCount
LocalFree
GetDiskFreeSpaceW
GetPrivateProfileIntA

user32

GetDlgItem
GetCaretPos
GetClassInfoA
CloseWindow
DrawStateA
DispatchMessageA
GetClientRect
CallWindowProcA
CreateWindowExA
GetMenu
FillRect
EndDialog
DestroyCaret

rasapi32

RasDialA
RasDeleteEntryA
DwEnumEntryDetails
DwRasUninitialize
DwCloneEntry

adsnt

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ