0a7f073f9714f9a070d1eb19640489cc_JaffaCakes118 | Triage

Sharing

General

Target

0a7f073f9714f9a070d1eb19640489cc_JaffaCakes118
Size

317KB
MD5

0a7f073f9714f9a070d1eb19640489cc
SHA1

05f88873eed092e74884ba4b824c026f6e4b3433
SHA256

d911d0e46f9e2c83acb26f77a9566b5659832d690c6495f6b560168d29e6c14d
SHA512

043b602ced32fda2069c3a381253f1b3da16e45c7ea6e299fba73d07b6abb77f719df7cb2e3c4cfc1b4c68ec106f96dd151548cd9ba49f83d7faca93dba8d15f
SSDEEP

6144:18euPrebjUrZctC17hSTkz+JxcQBF1L2Xv6lKl/G7RLjeXqiyvzC+QOo5HvDDueX:CdPreHUrkC1NSTkz+3cQBF1L2Xv6lKlt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0a7f073f9714f9a070d1eb19640489cc_JaffaCakes118

Files

0a7f073f9714f9a070d1eb19640489cc_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f726bd7f1f33fe7f5b219a2a5b49f3c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
CreateNamedPipeA
GetProcAddress

Exports

Exports

giordqgyjjjoe
qnyrbqertbolwgu
sjdetjsalupyb

Sections

.text
Size: 303KB - Virtual size: 303KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ