ba62537c3a1cb97d0f5d3a1f96cf0fb2_JaffaCakes118 | Triage

Sharing

General

Target

ba62537c3a1cb97d0f5d3a1f96cf0fb2_JaffaCakes118
Size

56KB
MD5

ba62537c3a1cb97d0f5d3a1f96cf0fb2
SHA1

c3f3a8ba53c6fab28ec2d8e39d8b5fb64e26f265
SHA256

160a478bf665146d6ae924b1e9959094048e1ba4a979699c253f3ad3ddba4582
SHA512

538da2032fc9be18c5f9a2e0b4823511d8bbd6263d4048f167cc659d1aef5f607e7bb72c71827aeb4c3cecaf5bcd899789c3ffc44c34ce0d54d0f4f3706cfb8d
SSDEEP

1536:e1VG5RLqLGenxomC4g2hCxEnuxQkem7l06RXiu:mGnAh6lVpQrmJTyu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba62537c3a1cb97d0f5d3a1f96cf0fb2_JaffaCakes118

Files

ba62537c3a1cb97d0f5d3a1f96cf0fb2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f8bd0b80ffd830a47e4b133d0436bb40

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
GetModuleHandleW
LoadLibraryA
VirtualAlloc
GetProcAddress

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ