14c0c3a7deb54d3131215902cf5a9fa0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14c0c3a7deb54d3131215902cf5a9fa0_JaffaCakes118
Size

355KB
MD5

14c0c3a7deb54d3131215902cf5a9fa0
SHA1

29af25de65b28cec0ed9c4d5f27a8f2decdf863f
SHA256

b1f6aa1dd373cddd9e2165898434845a856ccf5687f90990e8084f94bbd26f86
SHA512

53688f5c2b697ed510eaff266dd3b6e868a0d37561a7643382cdf6375e76b15412374bcf36f8ef2e13798fb757a1d84682ae5e74689c8d6508b91dac288cef63
SSDEEP

6144:X+jOHxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVVT:XLR9QI0Ay6fYvzEOe2KNSQ6l83zBzsu+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14c0c3a7deb54d3131215902cf5a9fa0_JaffaCakes118

Files

14c0c3a7deb54d3131215902cf5a9fa0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9aabf0ab698a363b3c060af46a73b861

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResetEvent
CreateFileA
FindAtomW
LoadLibraryA
CloseHandle
ExitProcess
GetPrivateProfileIntA
GetModuleHandleW
GetTickCount
SuspendThread
GetFileAttributesA
GetSystemTime
lstrlenA
VirtualAlloc
GetComputerNameW
GetDiskFreeSpaceW
GetCommandLineW
GetTickCount
LocalFree
ResumeThread

user32

CallWindowProcA
GetClassInfoA
CloseWindow
GetMenu
GetCaretPos
CreateWindowExA
EndDialog
DestroyCaret
GetClientRect
DrawStateA
FillRect
DispatchMessageA
GetDlgItem

rasapi32

RasDeleteEntryA
DwRasUninitialize
DwEnumEntryDetails
RasDialA
DwCloneEntry

adsnt

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ