788da6fe2f0aeba148b7a84adc6c3d2d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

788da6fe2f0aeba148b7a84adc6c3d2d_JaffaCakes118
Size

100KB
MD5

788da6fe2f0aeba148b7a84adc6c3d2d
SHA1

722aabfa243d0ca4984c90ff35f620b35a8f90f2
SHA256

fbab187a35d0fe5a1a1504965c5e57b1dd72b40889327a02ccf7a593c80f3ab3
SHA512

ac313c27437edf9911f23ca2261716ab8fd00fc8afccc1aeb859229ec8a91b9b523224101e8b0de60572c5d671a74b822fe73335250532c3e4ade8a5a67cb6b0
SSDEEP

3072:iK/uE3bVN/Zl7ekMauNqA0oAQOwiK4cE7Qtwfj:iK/uuVN/kzaRKDiQ2fj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
788da6fe2f0aeba148b7a84adc6c3d2d_JaffaCakes118

Files

788da6fe2f0aeba148b7a84adc6c3d2d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6678221edbf0d77a232d05a0c63c58b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
CreateMailslotA
CreateSemaphoreA
DeleteAtom
CreateMutexA

comctl32

FlatSB_SetScrollRange
ImageList_Copy
ImageList_DragLeave
ImageList_GetImageCount
ImageList_SetImageCount
ImageList_Write

Sections

.text
Size: 70KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE