fa31995d1e984b2fdf250d6e9a0a0081_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa31995d1e984b2fdf250d6e9a0a0081_JaffaCakes118
Size

11KB
MD5

fa31995d1e984b2fdf250d6e9a0a0081
SHA1

47e6e35665f14aead4a45956537858e01aa92c15
SHA256

ddafeea8f34009ea31c781bb5441976baebf65a4ed4bfbce0abde155407b1368
SHA512

21e3c26245fd88aa5018c9624120674a49d74699266907cd7c061fd76b4781121cdb5f2f2b4e4ea3edcadc00fb2b12b7c93cdb19080bc5a037fe67cdb819857f
SSDEEP

192:EoV1xIk/L4EtmlEY/679oSl/6kFbowcA+WRPJAodPn/WvbRZ:ESxIkVmi79ns4tcDWRPfdPn/WvbRZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa31995d1e984b2fdf250d6e9a0a0081_JaffaCakes118

Files

fa31995d1e984b2fdf250d6e9a0a0081_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0498005622f2ffb90630eb75e3caeba2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
lstrcatA
WinExec
Sleep
GlobalAlloc
GetModuleHandleA
ExitProcess
lstrcpyA
DeleteFileA
CreateFileA
CloseHandle
ReadFile
WriteFile
MultiByteToWideChar
GetSystemDirectoryA
GetCommandLineA
lstrlenA
CreateThread
GetShortPathNameA

rasapi32

RasDeleteEntryA
RasSetEntryPropertiesA
RasDialA
RasSetEntryDialParamsA
RasHangUpA
RasEnumDevicesA
RasEnumConnectionsA

user32

UpdateWindow
DispatchMessageA
SendMessageA
IsDialogMessageA
GetMessageA
EndDialog
CreateDialogParamA
SetWindowPos
ShowWindow
TranslateMessage
wsprintfA

ole32

CoInitialize
CoCreateInstance

advapi32

RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegEnumKeyA
RegQueryValueExA
RegDeleteValueA

shell32

SHGetSpecialFolderLocation
SHGetPathFromIDListA

Sections

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ