07d5ccb97c5545e57212282a74a09230_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

07d5ccb97c5545e57212282a74a09230_JaffaCakes118
Size

355KB
MD5

07d5ccb97c5545e57212282a74a09230
SHA1

02975385ab0526032ed8858ce4b30021b7476417
SHA256

878992619c9a58d834a399f4367c5ee078c23e6185c1bb0a71c4c21859876036
SHA512

81b188d6f280905bd0713099fc96fae3cd90d74ebae68f5b55f3c695ca80e596050d78c968557753c56fc9d6bd56aa722a9ce01465248a796c155709f5127297
SSDEEP

6144:b4FfYHxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVN:bOQR9QI0Ay6fYvzEOe2KNSQ6l83zBzsb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07d5ccb97c5545e57212282a74a09230_JaffaCakes118

Files

07d5ccb97c5545e57212282a74a09230_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4c62a37c017ab70a8b5bdb146e605db5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
CreateFileA
GetFileAttributesA
GetTickCount
GetDiskFreeSpaceW
ExitProcess
ResetEvent
CloseHandle
GetComputerNameW
FindAtomW
VirtualAlloc
LocalFree
ReleaseMutex
GetDriveTypeW
GetTickCount
GetSystemTime
lstrlenA
GetModuleHandleW
GetCommandLineW
LoadLibraryA

user32

CloseWindow
GetClientRect
EndDialog
DispatchMessageA
GetClassInfoA
GetMenu
DrawStateA
GetDlgItem
CallWindowProcA
GetCaretPos
FillRect
CreateWindowExA
DestroyCaret

rasapi32

DwEnumEntryDetails
DwCloneEntry
DwRasUninitialize
RasDialA
RasDeleteEntryA

adsnt

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ