b06b277a5530ade8dc0b49df7eeb9efc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b06b277a5530ade8dc0b49df7eeb9efc_JaffaCakes118
Size

32KB
MD5

b06b277a5530ade8dc0b49df7eeb9efc
SHA1

685de63e6eeda2fbf7840eaf0837e7f066f1474b
SHA256

4960bf37bb0ca749b4b7b812e4a4015dddc010c3a4ec410adc1abbfd83f6d957
SHA512

39a6bc034999b9ebc2f1ee2216bd0b25a8221efbc4c3e2d8bfbf8b908f912550a0a4311e236c01df64969a2643f0b75f7f49af3f9c87d0c8de289f6c0afb0746
SSDEEP

768:kcwrtHjjc9pLVVd00/YYH+8sx1pKSH6AAI3rxiKtBbC:kPrtHnm9V7YnZKSaAAT+h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b06b277a5530ade8dc0b49df7eeb9efc_JaffaCakes118

Files

b06b277a5530ade8dc0b49df7eeb9efc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c5c70d06ed73206b407de00f24fd96b7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ConnectNamedPipe
CreateFileA
CreateNamedPipeA
CreateThread
DisconnectNamedPipe
ExitThread
FlushFileBuffers
GetExitCodeThread
GetModuleHandleA
ReadFile
SetUnhandledExceptionFilter
Sleep
VirtualAlloc
VirtualFree
VirtualProtect
WaitForMultipleObjects
WriteFile

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 534B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ