11fe44d273d379fa7a93ad510903b8a1_JaffaCakes118 | Triage

Sharing

General

Target

11fe44d273d379fa7a93ad510903b8a1_JaffaCakes118
Size

171KB
MD5

11fe44d273d379fa7a93ad510903b8a1
SHA1

4a18bd91acd42145aa01c3bffff7a10f738d0933
SHA256

f861639ece923b78ab0b83e19c33f43c7a3ebae05b880c0aada2ad4dc399de1e
SHA512

dbaf974bd205aa3e763ce0c6f32508a030e512810b7585ff2d6cdbce6cd1268bb22999654a0d65e6033bef8ae3b836cdf260d37e7956bb0e10d90521b0cc76e6
SSDEEP

3072:OaWQK32RpS+gevPVyY91iAKvBcMp68FVoptF4VUceP3/wUPtbqSAoGJ+jMi:DK30oevPVRXiAKv6qbV2tF4NePVAo+2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11fe44d273d379fa7a93ad510903b8a1_JaffaCakes118

Files

11fe44d273d379fa7a93ad510903b8a1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8d926ade84bfc6b70528d85d0908db50

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetProcessDefaultLayout

kernel32

IsDBCSLeadByte

shlwapi

StrStrA

Exports

Exports

AssictCopL
?IsFailedLow@@YG_JU_FORMFACTOR@@U_PROGRESS_INVOKE_CMP@@IL
?LoginConnect@@YG_JU_FORMFACTOR@@U_PROGRESS_INVOKE_CMP@@IL

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.write
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.int
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.read
Size: 512B - Virtual size: 258B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ