961b46deb603713898acbf5ca3ae4ddb_JaffaCakes118 | Triage

Sharing

General

Target

961b46deb603713898acbf5ca3ae4ddb_JaffaCakes118
Size

12KB
MD5

961b46deb603713898acbf5ca3ae4ddb
SHA1

222031ce16683a532157e481ad9d9acd515e451b
SHA256

1aa0ade97a1a2cf23d6bb0f86da85edac37064e8eb964e0f0a5fe34011b40d19
SHA512

b3388f5f9af2c047bcf0e0761deba338d807450a006976eb03459b835b98709321be448278e9af7d57c59e627995542cf2e061fd0be13ad63f87c9c5b06c4590
SSDEEP

192:hwbr+JOBQ1FP4PC4h1B/Ue6XC/QH+LrXTuvpTetJzr1aym/xFlbdB:yLqjwPC4hvUeVVr6Lym/xRB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
961b46deb603713898acbf5ca3ae4ddb_JaffaCakes118

Files

961b46deb603713898acbf5ca3ae4ddb_JaffaCakes118
.exe windows:5 windows x86 arch:x86

67eb6d878fb59dbcf1b298f5d1f29eb8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CreateMutexW
PeekNamedPipe
WaitNamedPipeW
WriteFile
TerminateThread
Sleep
ReadFile
CreateFileW
GetLastError
GetProcAddress
LoadLibraryA
SetNamedPipeHandleState
CloseHandle

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ