6ff10d20ff6572f012e33a654e4f8237_JaffaCakes118 | Triage

Sharing

General

Target

6ff10d20ff6572f012e33a654e4f8237_JaffaCakes118
Size

100KB
MD5

6ff10d20ff6572f012e33a654e4f8237
SHA1

277585dcc4ef4e4ceb0c284b115d578cc7893cc6
SHA256

adc6782180f52b27081cc0f50abfa9c0690ddf0f21e42f73927b41515d70f204
SHA512

aa36f0124582242c4fbebea20a36ad20b759223447ba880dd9ebb95b23a6cc5e2ee839f8fdf8d5b54f1a9abf46498c12f674953e53b6fd6d6f63c3ee7be1f0d2
SSDEEP

1536:GNezNm1UwQ4yl6QVHQvVHEkgmsfT9I5MyvEVTB81OnGIyplcfxh5UylIcnev:G4JLwQ4NQVHOrgkmB5fGQfri80

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ff10d20ff6572f012e33a654e4f8237_JaffaCakes118

Files

6ff10d20ff6572f012e33a654e4f8237_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18677307e798c43be208f4d1b20b91d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

FlatSB_SetScrollRange
ImageList_Copy
ImageList_DragLeave
ImageList_GetImageCount
ImageList_SetImageCount
ImageList_Write

kernel32

CreateDirectoryA
CreateMailslotA
CreateSemaphoreA
DeleteAtom
CreateMutexA

Sections

.text
Size: 70KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE