11f0fd2131aad1db21d6b391d94ba4f0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11f0fd2131aad1db21d6b391d94ba4f0_JaffaCakes118
Size

671KB
MD5

11f0fd2131aad1db21d6b391d94ba4f0
SHA1

dfd846afb28cdd761284d622994d9dad4ee4b367
SHA256

317fdff7d9da0d9c7ff421daa400304f3678998bfa22b94a6a931140e4dd8644
SHA512

594df5ab40aa11b6dbddceabd9aa5f4c0e7691b619ce52e426587d958b19b4c0ddb87dad4d263bcd77469422f3dda92c2f64459444d9bf3946e4aebf47471cd0
SSDEEP

6144:unu1fSe4VA85y36Ejykek2qA0oe2LN+V/I+d79FrV6Ki0sYBo5MidOvFJbs4cd:uu1fslG6EwYAZeEN+V/frVCQoMJbs4c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11f0fd2131aad1db21d6b391d94ba4f0_JaffaCakes118

Files

11f0fd2131aad1db21d6b391d94ba4f0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

de7b75738968d8260ff3dd80ae712d43

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleW
GetDriveTypeA
Sleep

user32

LoadBitmapW
GetSysColor

advapi32

RegOpenKeyExA
RegQueryValueExA

msvcrt

_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
exit

Sections

.text
Size: 639KB - Virtual size: 639KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ