65c83e4f59736ffd68b669703f4ea2b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65c83e4f59736ffd68b669703f4ea2b3_JaffaCakes118
Size

100KB
MD5

65c83e4f59736ffd68b669703f4ea2b3
SHA1

2c921a587a8215264f9227cc8e80758ae50f5e87
SHA256

c7047a7159754bf0ecd4e7dc264d5ddac83d2add0b1d0f2148bd25c1d26e20a7
SHA512

c9a5bc1688fd055330dacc2611ad7e98e18fdfe87cc50e0034a6e75b391dae2367feccfde07e16865d557893af7d14f0ff8281a053bd688d2a6d9005eb2728a5
SSDEEP

1536:eEsWNNUWTdbzVs+Iuz+BXKzpUpiSvXDiObe9XU6vs+Q9As0UzsKV6byuVMJc0wAD:eEfNiWRa2aXKzSb+9x74/66lwk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65c83e4f59736ffd68b669703f4ea2b3_JaffaCakes118

Files

65c83e4f59736ffd68b669703f4ea2b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6678221edbf0d77a232d05a0c63c58b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
CreateMailslotA
CreateSemaphoreA
DeleteAtom
CreateMutexA

comctl32

FlatSB_SetScrollRange
ImageList_Copy
ImageList_DragLeave
ImageList_GetImageCount
ImageList_SetImageCount
ImageList_Write

Sections

.text
Size: 70KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE