0803d4790c1c56c0f584e482fdf32f08_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0803d4790c1c56c0f584e482fdf32f08_JaffaCakes118
Size

100KB
MD5

0803d4790c1c56c0f584e482fdf32f08
SHA1

8b5c6b6f18761375df72ad63d1b60fac79c23235
SHA256

bed09898e106468fd2653952e83473abf035c5c046cd17f037c24d468845b546
SHA512

4ebc6b31082429ead86fe9c337b49673255a750063d571119c3300586ef1c65cb0fdaedd1d7092ddb136791fbb1ced11d1744490677e0570ae6e805e3e12d944
SSDEEP

3072:s5ArMBB7rQfIWS8COg5r39Xp9PFdWsQErAx353KY:E2YQAWcOgF39Xp9PFdW4AR5t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0803d4790c1c56c0f584e482fdf32f08_JaffaCakes118

Files

0803d4790c1c56c0f584e482fdf32f08_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6678221edbf0d77a232d05a0c63c58b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
CreateMailslotA
CreateSemaphoreA
DeleteAtom
CreateMutexA

comctl32

FlatSB_SetScrollRange
ImageList_Copy
ImageList_DragLeave
ImageList_GetImageCount
ImageList_SetImageCount
ImageList_Write

Sections

.text
Size: 70KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE