a567da6d9834dac9b3d2b5ff3529fb27_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a567da6d9834dac9b3d2b5ff3529fb27_JaffaCakes118
Size

319KB
MD5

a567da6d9834dac9b3d2b5ff3529fb27
SHA1

9ff1343295ab5d3b2caba163301cb0947fe5e8e1
SHA256

4e34e90cfbe9284ef4f0e313b0774a3f1bad0a91ffc483d9722017f12e307508
SHA512

030ae6b4abd838e41c29fe4a9ed0842c9fc2df3f5fcb84e370e282ae59fd93409418d0f5f975f415596f19a29dbe2a3cd33f24f3f65a788b2ac25f282c907af3
SSDEEP

6144:crbM3SEEtsIkS2yTcx7VNtmq183sVMi0vnKy:crbM32RIVNYqq30M3vnP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a567da6d9834dac9b3d2b5ff3529fb27_JaffaCakes118

Files

a567da6d9834dac9b3d2b5ff3529fb27_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f726bd7f1f33fe7f5b219a2a5b49f3c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
CreateNamedPipeA
GetProcAddress

Exports

Exports

eykmidszdskq
nkocrjjae
qcgyweaxsvdswe

Sections

.text
Size: 309KB - Virtual size: 308KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ