fbc5a69a68d12e73df40e128e9b597bb_JaffaCakes118 | Triage

Sharing

General

Target

fbc5a69a68d12e73df40e128e9b597bb_JaffaCakes118
Size

355KB
MD5

fbc5a69a68d12e73df40e128e9b597bb
SHA1

a253b60b65a161974805eed0ec8c21e19d224596
SHA256

780352d4be203b9a42f3821be23fd7b112994727ea3e745953b9bebbf3d3d04a
SHA512

d7d68cd705c9e013e5c02c904f6b218b469775763b4b02b251df4a62185851c27024e522df2775b3743b14307b775781344fe3648ce01c46d55e85eea9edfd3f
SSDEEP

6144:12HHxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVV2+:1IR9QI0Ay6fYvzEOe2KNSQ6l83zBzsu+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbc5a69a68d12e73df40e128e9b597bb_JaffaCakes118

Files

fbc5a69a68d12e73df40e128e9b597bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e317e1abe70fc70d4ab6ad4026c94656

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntA
GetTickCount
GetSystemTime
ExitProcess
CloseHandle
FindAtomW
VirtualAlloc
GetFileAttributesA
ResetEvent
GetCommandLineW
lstrlenA
ResumeThread
LoadLibraryA
CreateFileA
GetDiskFreeSpaceW
GetComputerNameW
GetModuleHandleW
LocalFree
GetTickCount
SuspendThread

user32

CreateWindowExA
DispatchMessageA
GetClientRect
GetDlgItem
DrawStateA
GetClassInfoA
GetCaretPos
CallWindowProcA
CloseWindow
GetMenu
EndDialog
DestroyCaret
FillRect

rasapi32

DwRasUninitialize
DwEnumEntryDetails
DwCloneEntry
RasDialA
RasDeleteEntryA

adsnt

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ