2c3690eeaf2d8abdc8c40ff1c501a7d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c3690eeaf2d8abdc8c40ff1c501a7d6_JaffaCakes118
Size

355KB
MD5

2c3690eeaf2d8abdc8c40ff1c501a7d6
SHA1

def34a0bf0d5821e57d38b095649b511ad6b94dd
SHA256

c3fbc20b756013fdbaf1cc752278fcf62eced33e8ce31904aff0368428c5d9ac
SHA512

a7a892415a12375a95f57b58a8ecf8fcc7e9b109e96302a712283f9a48f48ac668998fdf84932b26f89b2bbe7c0f2230c652e3a1fb18ec1c44cc1f09ebfc3238
SSDEEP

6144:bwFfYHxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVN:bGQR9QI0Ay6fYvzEOe2KNSQ6l83zBzsb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c3690eeaf2d8abdc8c40ff1c501a7d6_JaffaCakes118

Files

2c3690eeaf2d8abdc8c40ff1c501a7d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4c62a37c017ab70a8b5bdb146e605db5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
CreateFileA
GetFileAttributesA
GetTickCount
GetDiskFreeSpaceW
ExitProcess
ResetEvent
CloseHandle
GetComputerNameW
FindAtomW
VirtualAlloc
LocalFree
ReleaseMutex
GetDriveTypeW
GetTickCount
GetSystemTime
lstrlenA
GetModuleHandleW
GetCommandLineW
LoadLibraryA

user32

CloseWindow
GetClientRect
EndDialog
DispatchMessageA
GetClassInfoA
GetMenu
DrawStateA
GetDlgItem
CallWindowProcA
GetCaretPos
FillRect
CreateWindowExA
DestroyCaret

rasapi32

DwEnumEntryDetails
DwCloneEntry
DwRasUninitialize
RasDialA
RasDeleteEntryA

adsnt

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ