5f89a597f2336ec06b1044c344bc6f5a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f89a597f2336ec06b1044c344bc6f5a_JaffaCakes118
Size

119KB
MD5

5f89a597f2336ec06b1044c344bc6f5a
SHA1

80897042a1496a3923594520d848b3581f400268
SHA256

5994ff6b348ec2bd5ed8baa5b3b19b692928a7875fd4612ea256d220fa7a3741
SHA512

00faa04f23332cbfe23131104e9f40f0b3a8fb68e5cfec8d5c79a5bb031df9716b3880fbdca8e27a0cf8ea45b9911e893ce83bf4e8aeb9d1606adc260d44ad4b
SSDEEP

3072:1plopOTPXUJGRfaPv/TBAWMumXHE36i417:1gkPXunTbMuqiy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f89a597f2336ec06b1044c344bc6f5a_JaffaCakes118

Files

5f89a597f2336ec06b1044c344bc6f5a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c522be50e9407f36f81523dc2482e942

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateNamedPipeA
LoadLibraryA
GetProcAddress

Exports

Exports

dferxskusotpkf
miieflnymaxk
ooiktvreeovtk

Sections

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 946B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ