5ab0e90ea6472f7c8f5fe664f2770019_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ab0e90ea6472f7c8f5fe664f2770019_JaffaCakes118
Size

16KB
MD5

5ab0e90ea6472f7c8f5fe664f2770019
SHA1

b0b2fc6e715965e141d7c0fa9f511b04e49e1036
SHA256

0b92ebcf3e691bcecff9b2becc27113c0a9ee01ba9affbfb6c6b3af4a4812b01
SHA512

6c64f8e027370f07d381dc48b685acaf8f08a969af503b77b0be3eb20a0d1dbf26e23a044fbe364a0a2c238660dda15a5d6adcad9a72585234c04d12d003d8d7
SSDEEP

384:vnDxslthHdVv4QnnsGa4L14A8c7nr7PazIcTwp5:vVmVdVdrL1BrnrbT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ab0e90ea6472f7c8f5fe664f2770019_JaffaCakes118

Files

5ab0e90ea6472f7c8f5fe664f2770019_JaffaCakes118
.exe windows:4 windows x86 arch:x86

21c68b7f91102455a9bf13fc27709d50

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetLastError
DisconnectNamedPipe

Sections

.text
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE