2839be4b16f5973edf762748b15f5675_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2839be4b16f5973edf762748b15f5675_JaffaCakes118
Size

100KB
MD5

2839be4b16f5973edf762748b15f5675
SHA1

e0f6fa513c89baa208bc74d0dc8cfb028759d6f3
SHA256

c969be24d61f9d34c0de15bc78b4f27032559692c479a6aae63bc9a5046fd011
SHA512

0950dcc5b0cb9d9d984d756d635e4012d2ce6e6449af8bb23d4b7a9c58d3ece13c14e051685f973690e42d182774316b5c24de5fba681487bdb57f54ba06b544
SSDEEP

1536:Rqr4Nogwmv1SnDa02bH4lAaxQQwOLLuxAsbLSUXa8LlM6dnJm36i/JIV9Kh2dkWR:1Nogwmv1I+9SAADLMAQaaOmmKSySgqOJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2839be4b16f5973edf762748b15f5675_JaffaCakes118

Files

2839be4b16f5973edf762748b15f5675_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6678221edbf0d77a232d05a0c63c58b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
CreateMailslotA
CreateSemaphoreA
DeleteAtom
CreateMutexA

comctl32

FlatSB_SetScrollRange
ImageList_Copy
ImageList_DragLeave
ImageList_GetImageCount
ImageList_SetImageCount
ImageList_Write

Sections

.text
Size: 70KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE