d11d66e554c143d233546ce6f6acfe9e_JaffaCakes118 | Triage

Sharing

General

Target

d11d66e554c143d233546ce6f6acfe9e_JaffaCakes118
Size

1012KB
MD5

d11d66e554c143d233546ce6f6acfe9e
SHA1

83dc393114f4d198e76633730fa973958675702b
SHA256

73c93395b0ca7ca41680de395e3e30a5b5904b2105f9307ec1c218343668ec7d
SHA512

74695e4b88b37562d7fe6e5ed1f97c5cba5264d4938bd479760555014ec2d1220b49e575bc8155110e82eae0ffe466d406e71f5dc4261416950dbe00fb58d61a
SSDEEP

12288:MaEWgAhLsQ181ZGVuXpMrs8rtE4qJgk4QLInDCeAxNkY+Xg/cQCCKgcBGnx3Fbse:MaEWgAhT+EuXhCqWvQLID0XD+XyUALbR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d11d66e554c143d233546ce6f6acfe9e_JaffaCakes118

Files

d11d66e554c143d233546ce6f6acfe9e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b7a77bb31584800aed0219d8b3642aa5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32 rasapi32

GetDIBits c

Sections

.text
Size: 316KB - Virtual size: 708KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 656KB - Virtual size: 656KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ