666c51e59813ff6d92473df9c59dd7b4_JaffaCakes118 | Triage

Sharing

General

Target

666c51e59813ff6d92473df9c59dd7b4_JaffaCakes118
Size

359KB
MD5

666c51e59813ff6d92473df9c59dd7b4
SHA1

67d306e5e45a1f7b61500e6ba6e09b86908e2692
SHA256

2ad3042899d08a1b949badecf15e298449d8e4758a12cfa356dfe6f652a47f0e
SHA512

ded2c0850856633ac7173ef9b45a591c8cc156b1cfa9acdfb46dfc0a1c3b52612d6b5b1bf5a9f9f6fe720c2d84fd554f02cd829a92e50487fdea5137e601d55c
SSDEEP

6144:2uHxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVV2Ir:2uR9QI0Ay6fYvzEOe2KNSQ6l83zBzsu+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
666c51e59813ff6d92473df9c59dd7b4_JaffaCakes118

Files

666c51e59813ff6d92473df9c59dd7b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

faafa06f883946f1effe978da1eab7a6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReleaseMutex
GetModuleHandleW
GetTickCount
LoadLibraryA
HeapCreate
CreateFileA
LocalFree
lstrlenA
GetTickCount
GetDiskFreeSpaceW
GetSystemTime
FindAtomW
CloseHandle
GetFileAttributesA
ExitProcess
ReleaseMutex
ResetEvent
GetDriveTypeA
GetCommandLineW
GetComputerNameW

user32

GetMenu
EndDialog
DrawStateA
DispatchMessageA
CallWindowProcA
GetComboBoxInfo
FillRect
CloseWindow
CreateWindowExA
GetCaretPos
GetDlgItem
GetClassInfoA
DestroyCaret

rasapi32

RasDialA
DwRasUninitialize
RasDeleteEntryA
DwEnumEntryDetails
DwCloneEntry

modemui

CountryRunOnce

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ