5d931ffdcce87daa2638dc5bb02d75b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d931ffdcce87daa2638dc5bb02d75b6_JaffaCakes118
Size

94KB
MD5

5d931ffdcce87daa2638dc5bb02d75b6
SHA1

5ac92f4203a4de10085e6b2e678db303ea3a4156
SHA256

7befb0da10b969bc67d753def0bbe708f31ccec4da2e105a89eaae09d260436e
SHA512

80ce146d6b37c25500d44350658e4c58d2242afe3d65d347c729682e213b5079c741a401b0e3d0a8b0b586cb957a1644840563515c0e7205f54e1d85f50d8f8b
SSDEEP

1536:26VRyRkaH6q1P/ka0uviz3lDpvXtE9jkVK+4KPZqc8YaEJwZK4/83ZoMOAdL5wTc:nbaH6uEaDizVDNtE9d+JohZEXtpxdL5L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d931ffdcce87daa2638dc5bb02d75b6_JaffaCakes118

Files

5d931ffdcce87daa2638dc5bb02d75b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

30e4bed8a8ae5ae87bc3f26b834b6680

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleExA
ConnectNamedPipe
WriteConsoleInputVDMW
IsWow64Process
SetThreadContext
DeleteAtom
WinExec
FindClose
SetConsoleCP
GetShortPathNameA
OpenEventW
GetCommProperties

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.krdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE