ba08d024ed9b52ae21e999e45c973365_JaffaCakes118 | Triage

Sharing

General

Target

ba08d024ed9b52ae21e999e45c973365_JaffaCakes118
Size

76KB
MD5

ba08d024ed9b52ae21e999e45c973365
SHA1

f089e22bc1bc9035dd4f536f2f0cafb5d9d99d4a
SHA256

4f9d4dfe8c14d68f4fe2be56ecfd327aa2cda11960def4e8d701e94131a373c2
SHA512

cec1bdfde282ddafecae1afe63c760d46998b31a64fe1f191662ebc96eac174015b69b9af927ce739c6b0e018db6af2b2efd6ade8749f570c819301be1e0d409
SSDEEP

1536:2W5YtuE5exBeTtW29Mak9R3da9lg/ALPa0uwXH0yjjTiZ4e5kkBELDLOwiNP9ue0:T33oSymPnY+LvLKcT+MkDHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba08d024ed9b52ae21e999e45c973365_JaffaCakes118

Files

ba08d024ed9b52ae21e999e45c973365_JaffaCakes118
.exe windows:4 windows x86 arch:x86

854278a51860c303735c854e4a8258e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUserGeoID
InitializeCriticalSection
LCMapStringW
ReadConsoleInputExA
GetSystemDefaultLCID
FreeLibraryAndExitThread
CreatePipe
CreateActCtxA
CreateSemaphoreW
LZCopy
EnumUILanguagesW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE