98be1dc0837c7249de2b3dfe70fccb5a_JaffaCakes118 | Triage

Sharing

General

Target

98be1dc0837c7249de2b3dfe70fccb5a_JaffaCakes118
Size

517KB
MD5

98be1dc0837c7249de2b3dfe70fccb5a
SHA1

fc2a3eba8606b6266b7f00acbef15028e5c66e28
SHA256

4afa80ec305dc55a64ab1f6c9a2c5155ce51c0b5e5a85f510259b5a8afc857a8
SHA512

7d394cf9dfd2c9f5328d54ad70878baf02a31d8d2f4f6abf4345a64f49259e3623cd5d59eb04861e5d35592bc84c306f21642b8fa657564bdb60067a924ae20b
SSDEEP

12288:aBR+qU6fPn2QvBSzu64vtNsJG3AjLE8nCbhvffr:U+BW/DgujtcGq9OFXr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98be1dc0837c7249de2b3dfe70fccb5a_JaffaCakes118

Files

98be1dc0837c7249de2b3dfe70fccb5a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

348af5f7ea19930a54ed6dbb171903ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventW
InterlockedIncrement
ReadConsoleA
OpenEventW
GetVersion
GetCurrentProcessId
LoadLibraryA
OpenSemaphoreW
HeapCreate
GetStartupInfoA
GetStringTypeW
CopyFileW
GetLongPathNameA
InterlockedDecrement
SetCurrentDirectoryW
IsValidCodePage
OpenMutexW
CreateMutexW

d3d8

ValidatePixelShader
Direct3DCreate8
ValidateVertexShader
DebugSetMute

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_WRITE

.mdata
Size: 500KB - Virtual size: 796KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ