fb5c3fd5e82839c3ef621361b66fdfe2_JaffaCakes118

General

Target

fb5c3fd5e82839c3ef621361b66fdfe2_JaffaCakes118
Size

15KB
MD5

fb5c3fd5e82839c3ef621361b66fdfe2
SHA1

61607528a8574f89fd2466525347948d80845663
SHA256

68496df96667b4dd1cd86c7ba33e5b14c60daddd6e82291983a4e0f006e5d1cb
SHA512

7dc31cccb09c8a45c53940e2c4b5bd643399c1f064a7e63c96ddbd1b4c17d014615cf56657260ca6ad3b85e9478c4027e323f6ed3f7fcb4ed12424eba5ba8a89
SSDEEP

192:PsrDjzROpOBUqHH/8dmjqR9NayViss4qcwFuoZZd6XBQIbw7HgH1mKoyngcfVIl/:uNCt8Smjk9Nt5wBd6Rlw7C1mKec

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb5c3fd5e82839c3ef621361b66fdfe2_JaffaCakes118

Files

fb5c3fd5e82839c3ef621361b66fdfe2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4f56a6eeac4da918efc6a18c29b87c44

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadStringA
GetWindowTextA
EnumWindows

rasapi32

RasEnumDevicesA
RasEnumEntriesA
RasGetEntryPropertiesA
RasHangUpA
RasEnumConnectionsA
RasDialA
RasGetEntryDialParamsA
RasGetConnectStatusA

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteValueA

shell32

ShellExecuteA

wsock32

WSAStartup
gethostname
gethostbyname
inet_addr

wininet

FindCloseUrlCache
FindFirstUrlCacheEntryA
DeleteUrlCacheEntry
FindNextUrlCacheEntryA

msvcrt

fprintf
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
rand
srand
time
atoi
strncpy
strcpy
strcmp
strlen
strstr
fclose
_stricmp
fopen
sscanf
memcpy
strcat
sprintf
fscanf
_findclose
_findfirst
exit
fputc
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv

kernel32

FindResourceA
LoadResource
GetLocaleInfoA
LockResource
GetModuleFileNameA
Sleep
GetVersionExA
DeleteFileA
GetModuleHandleA
GetStartupInfoA
SizeofResource
ExpandEnvironmentStringsA
CreateFileA
WriteFile
CloseHandle

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f56a6eeac4da918efc6a18c29b87c44

Headers

File Characteristics

Imports

user32

rasapi32

advapi32

shell32

wsock32

wininet

msvcrt

kernel32

Sections

.text Size: 7KB - Virtual size: 7KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 2KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 7KB - Virtual size: 7KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 2KB

.rsrc
Size: 3KB - Virtual size: 3KB