dfbd20a0cf8056d7468c4e2035592a42_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfbd20a0cf8056d7468c4e2035592a42_JaffaCakes118
Size

100KB
MD5

dfbd20a0cf8056d7468c4e2035592a42
SHA1

b375b77a11f4f108744f0db0876f7ff07f21b7e1
SHA256

8b418c2cefa812f096526da0f35f9b4fb0c9b75dbb60f460569ef4767d3f858d
SHA512

bdc21e9e7e6b928aef17e3c6d3d5adb9b243efb63e5a50cf2b017c7a60c1d95380c7fad7b112ba3940152edb19a8a4834886ee2a0e6c99eace272e5d455a5e80
SSDEEP

1536:GNezNm1UwQ4yl6QVHQvVHEkgmsfT9I5MyvEVTB81OnGIyplcfxh5UylIcne:G4JLwQ4NQVHOrgkmB5fGQfri8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfbd20a0cf8056d7468c4e2035592a42_JaffaCakes118

Files

dfbd20a0cf8056d7468c4e2035592a42_JaffaCakes118
.exe windows:4 windows x86 arch:x86

18677307e798c43be208f4d1b20b91d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

FlatSB_SetScrollRange
ImageList_Copy
ImageList_DragLeave
ImageList_GetImageCount
ImageList_SetImageCount
ImageList_Write

kernel32

CreateDirectoryA
CreateMailslotA
CreateSemaphoreA
DeleteAtom
CreateMutexA

Sections

.text
Size: 70KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE