08b7dac12388876de7cf5427325ad776_JaffaCakes118 | Triage

Sharing

General

Target

08b7dac12388876de7cf5427325ad776_JaffaCakes118
Size

460KB
MD5

08b7dac12388876de7cf5427325ad776
SHA1

642851e13314a2335d6c620382dc4c060c9ad2ed
SHA256

a4633b6b6d22dfa3c5fa1bfb9fe1aad0124816c7458bfa238b7d616a2e984314
SHA512

dcbf5d6ffe621fa82ef7b01516581e5150952a9a6e7b3ccbf4c6eb676acf310ff4f53415b6658afcb167d8e6108849c43d237d8704157b68a0ffcfe0e5924fb1
SSDEEP

6144:J2OvX/w4wU7rAQyGpCe6gp9pvuyo76/ItoF1xalevyw8+8EXljvgzVVyo:J2WwfykQ7pCe6K2yX/ItoAYNxXFsVVJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08b7dac12388876de7cf5427325ad776_JaffaCakes118

Files

08b7dac12388876de7cf5427325ad776_JaffaCakes118
.exe windows:4 windows x86 arch:x86

50bd89437edd7d864944d03b054cdec4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SwitchToFiber
GetProcAddress
ExitProcess
GetPriorityClass
GetModuleHandleW

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 439KB - Virtual size: 439KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ