ba5a521234cac9ce029b73d8c31efa40_JaffaCakes118 | Triage

Sharing

General

Target

ba5a521234cac9ce029b73d8c31efa40_JaffaCakes118
Size

56KB
MD5

ba5a521234cac9ce029b73d8c31efa40
SHA1

7612282af03aef2f77ec090200e428dacc6ef978
SHA256

5521495dc725408a1744af952cdb3baa9c94aee4dbb338ac91bcf2cf63abce72
SHA512

e4115a5252e54d6b06e589ff84dfb79fb1ab71e85f7520983e505c9765e0f0c7b23385ebd4aafbe19f4ed05a2693b1f48141f27b7b062a060d281ca385af4cb5
SSDEEP

1536:FK0n+JyAbqPorQZXTHoQUftuPLXF98F1J:FeJLb4oENL/UftqFSTJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba5a521234cac9ce029b73d8c31efa40_JaffaCakes118

Files

ba5a521234cac9ce029b73d8c31efa40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5d581f3ce89b231e4bdc41024fe80d78

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryDepthSList
DeleteFiber
FindAtomA
LZInit
DebugActiveProcessStop
FreeEnvironmentStringsA
AllocateUserPhysicalPages
CreateEventW
GlobalUnfix
GetConsoleSelectionInfo
OpenEventW
CreateThread

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE