6fe006259294449ea5effbe6f4f472d9_JaffaCakes118 | Triage

Sharing

General

Target

6fe006259294449ea5effbe6f4f472d9_JaffaCakes118
Size

34KB
MD5

6fe006259294449ea5effbe6f4f472d9
SHA1

398f3f61b77e0400ddb0f596291727ac9be7e490
SHA256

96cf63e06797a19b5180b2fd6a5dae54f61141aa7279b6b05047761133c1b8c8
SHA512

a5d4e299bd42c76dc64faac22cdc17682e9452582df2eb9ed441f5470ba9571ab8beb4c63e01378949506046be1df58a0945b2d617df24ffc4b8fb7eff1ce9f4
SSDEEP

768:kJG9mSndWAIDEziK5su1rdABqFYz4j8ORhoob:gGwSnd3zL57fFYyRGy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fe006259294449ea5effbe6f4f472d9_JaffaCakes118

Files

6fe006259294449ea5effbe6f4f472d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9baaad6c7eab40b2177c3bf6047ffd68

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ConnectNamedPipe
CreateEventA
CreateFileA
CreateNamedPipeA
CreateThread
DisconnectNamedPipe
ExitThread
FlushFileBuffers
GetCurrentProcessId
GetCurrentThread
GetExitCodeThread
GetModuleHandleA
ReadFile
SetEvent
SetUnhandledExceptionFilter
Sleep
TerminateThread
VirtualAlloc
VirtualFree
VirtualProtect
WaitForMultipleObjects
WaitForSingleObject
WriteFile

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ