ba69a646543f915e41367b17dc473572_JaffaCakes118 | Triage

Sharing

General

Target

ba69a646543f915e41367b17dc473572_JaffaCakes118
Size

379KB
MD5

ba69a646543f915e41367b17dc473572
SHA1

d449009a8733e707767f59ddc3d0f7d88f576cde
SHA256

19f01d7796a8b2f8a898dc2ddd122bf09d95bcd0d72a422f573e94c458f4095d
SHA512

7b0d9f91415bfe9adf7d4040d7ace211c53b1af9957ef8cf2f6383bc3842e1ea010f13c56d9611fb0ea9937294ddf43a646f8b3eb8a9f6f734f163a548a60355
SSDEEP

6144:jqn4Nw4xBWU0cjw1q45rItty41XRCbUrMDYMOUmC2hqOepUyPKj6FAKV7XK:On6H0L1X5rIf1zr8YvC29SUyPTFG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ba69a646543f915e41367b17dc473572_JaffaCakes118

Files

ba69a646543f915e41367b17dc473572_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ffb191c1a65355bc2a5f53407962ae83

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ConvertThreadToFiber
GetProcAddress
ExitProcess
SetThreadPriority
GetModuleHandleW

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 439KB - Virtual size: 439KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ