fe85a9c4ce847c1ecf81520d40783f46_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe85a9c4ce847c1ecf81520d40783f46_JaffaCakes118
Size

355KB
MD5

fe85a9c4ce847c1ecf81520d40783f46
SHA1

6b15709b35bcdae9f239a713b78f4de04f358fd3
SHA256

64db0670f3d1968c52f850e1f9f864470250822e0033010d7898941e33223a64
SHA512

f93c209e1f529c7124c293b8efe67ac1e4d2d81b5a05632b82b4223606dbc05ef97c0a84f6d5d40aec03958c111f3fe623882de8f63750eb259db61a03442694
SSDEEP

6144:WMQHxSlGPQBaZ+BqhMXAy6fYv2SeJ3eB8fvmKNNcQ5ta6gKv5R3L/XWlpWzsVV2+:pQR9QI0Ay6fYvzEOe2KNSQ6l83zBzsu+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe85a9c4ce847c1ecf81520d40783f46_JaffaCakes118

Files

fe85a9c4ce847c1ecf81520d40783f46_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ebe745c0c6781f37b84adc74f0314fb2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
SuspendThread
ResumeThread
LocalFree
VirtualAlloc
GetPrivateProfileIntA
GetComputerNameW
GetSystemTime
GetModuleHandleW
GetTickCount
FindAtomW
GetTickCount
lstrlenA
ResetEvent
GetCommandLineW
GetDiskFreeSpaceW
ExitProcess
CloseHandle
GetFileAttributesA
LoadLibraryA

user32

DrawStateA
DestroyCaret
GetClientRect
CallWindowProcA
FillRect
GetDlgItem
EndDialog
GetClassInfoA
CreateWindowExA
CloseWindow
GetMenu
GetCaretPos
DispatchMessageA

rasapi32

DwRasUninitialize
RasDialA
DwEnumEntryDetails
RasDeleteEntryA
DwCloneEntry

adsnt

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 346KB - Virtual size: 345KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ