385019184806bfbc66030ddda16b11b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

385019184806bfbc66030ddda16b11b6_JaffaCakes118
Size

8KB
MD5

385019184806bfbc66030ddda16b11b6
SHA1

1cae9fb2237f8dd0a60fd9c85426ad46e89cf8dd
SHA256

63878d85daa7f15b587b74ea950ce6683514205ebe7239aa8bae282322b2b4e1
SHA512

fc5a7f5169f775b64c45e2f1f9d2e48e897b2cf32350af0a9812b833c1d0b1051876aa927acf4f20e3b3547d3f25bd6051ac072a480b5f5a98cc9039c6c5b83b
SSDEEP

96:izBEWVAhWwftDX/kDbzuT714pVUtOwDD0pBDXiebs/Am2grWXGu2DXa10ymnIDr/:iWWOhWYT71ojDBQABJz0ymVqn7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
385019184806bfbc66030ddda16b11b6_JaffaCakes118

Files

385019184806bfbc66030ddda16b11b6_JaffaCakes118
.dll windows:10 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

api-ms-win-core-namedpipe-l1-1-0.pdb

Exports

Exports

ConnectNamedPipe
CreateNamedPipeW
CreatePipe
DisconnectNamedPipe
GetNamedPipeClientComputerNameW
ImpersonateNamedPipeClient
PeekNamedPipe
SetNamedPipeHandleState
TransactNamedPipe
WaitNamedPipeW

Sections

.text
Size: 1024B - Virtual size: 929B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ