a081cc1224ecadf37e4d48e55303372b_JaffaCakes118 | Triage

Sharing

General

Target

a081cc1224ecadf37e4d48e55303372b_JaffaCakes118
Size

119KB
MD5

a081cc1224ecadf37e4d48e55303372b
SHA1

cf7b549b3b18438daa7bdcbb0298fc3b5b9f150c
SHA256

d03ce9582cb85877b48c6546cf0727971909f94844879fc51fae362a88dbb396
SHA512

10dbbd8c4a0bbdd36e717dfef67d5f3178d4d7375c8105cac2fcfacc12f397909518ab14b9daf6ae3ddb1b3440a42560bf1c95034df7b83f1a716aa40dc71b46
SSDEEP

3072:1plopOTPXUJGRfaPv/TBAWMumXHE36i41V:1gkPXunTbMuqiA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a081cc1224ecadf37e4d48e55303372b_JaffaCakes118

Files

a081cc1224ecadf37e4d48e55303372b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c522be50e9407f36f81523dc2482e942

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateNamedPipeA
LoadLibraryA
GetProcAddress

Exports

Exports

dferxskusotpkf
miieflnymaxk
ooiktvreeovtk

Sections

.text
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 946B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ