fdf3466cbc0378edfb0e60b623078364_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdf3466cbc0378edfb0e60b623078364_JaffaCakes118
Size

355KB
MD5

fdf3466cbc0378edfb0e60b623078364
SHA1

f360169454c727166b44ce81c66eaaefab85d754
SHA256

d4c3bdca6ec1b6ab93aa92154b376381e38d68df14c82d9c6c6752bfd90f343c
SHA512

8e3f4f5afdd935cc7d5622c19ef9fce4df90c9f4d1700f22fc259f4906d9b5bf99d3e7ef7840a375ad826781b414fe23cae97991e4b60afb2b0f21ba5b987244
SSDEEP

6144:qCHxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVV2Ir:qCR9QI0Ay6fYvzEOe2KNSQ6l83zBzsu+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdf3466cbc0378edfb0e60b623078364_JaffaCakes118

Files

fdf3466cbc0378edfb0e60b623078364_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b3ef2afddc8567823c0c877b04d25ee6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
ExitProcess
GetCommandLineW
GetSystemTime
GetComputerNameW
ResetEvent
CreateFileA
GetTickCount
GetFileAttributesA
FindAtomW
GetModuleHandleW
ResumeThread
CloseHandle
VirtualAlloc
SuspendThread
LoadLibraryA
GetTickCount
LocalFree
GetDiskFreeSpaceW
GetPrivateProfileIntA

user32

GetDlgItem
GetCaretPos
GetClassInfoA
CloseWindow
DrawStateA
DispatchMessageA
GetClientRect
CallWindowProcA
CreateWindowExA
GetMenu
FillRect
EndDialog
DestroyCaret

rasapi32

RasDialA
RasDeleteEntryA
DwEnumEntryDetails
DwRasUninitialize
DwCloneEntry

adsnt

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ