11f76ded6adb5fc6d9a15f78e0e0a76a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

11f76ded6adb5fc6d9a15f78e0e0a76a_JaffaCakes118
Size

630KB
MD5

11f76ded6adb5fc6d9a15f78e0e0a76a
SHA1

06cf530dfe7dad245bcfb6f02c8e6d432fb4a21f
SHA256

9c18f2cc3ca553c8e4e4eeefa9e162848acf5f8786aebc9dbc90809c5d498769
SHA512

6d528cfa9d152ee929924b2c9cdc57b115316ff430099247eb7fa66dc5165924741c99890606249faf488cf3bbf6d84dbf1f331d872d8c33a546fd94bfd9d31b
SSDEEP

12288:h6Qyv5+vt/2z9olD6669/M+l6nRSciC1qfyI2stDzZ6JvEl+UgKsXBeGdnbH:hO5+v4olDK9/M/PhqV2+Z6JvJVKYeGdr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11f76ded6adb5fc6d9a15f78e0e0a76a_JaffaCakes118

Files

11f76ded6adb5fc6d9a15f78e0e0a76a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 552KB - Virtual size: 724KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE