b93c73b5398041f5bfd1e9c7cd55da1e_JaffaCakes118 | Triage

Sharing

General

Target

b93c73b5398041f5bfd1e9c7cd55da1e_JaffaCakes118
Size

34KB
MD5

b93c73b5398041f5bfd1e9c7cd55da1e
SHA1

350cb7ffb8da0c650b7efd0518a8dbcef5be2c7a
SHA256

62c5f7935b77d45778bb5a12a8db19dc330bc049d8672656287b73ca63964f99
SHA512

85b1bf1f31740e8e0335d72df20147e372085c017f25607ff7aa4ff412e15787be1c6496f7775f82f416bbd8ba694bc5f90bad22f3f55ba7974e1ff872890d3f
SSDEEP

768:0DXXMb9eT0uCqMblI4Os8FpP28MxHZRBvj8Oghoob:UA9eT0rRI4Os8zaHZ/gGy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b93c73b5398041f5bfd1e9c7cd55da1e_JaffaCakes118

Files

b93c73b5398041f5bfd1e9c7cd55da1e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9baaad6c7eab40b2177c3bf6047ffd68

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ConnectNamedPipe
CreateEventA
CreateFileA
CreateNamedPipeA
CreateThread
DisconnectNamedPipe
ExitThread
FlushFileBuffers
GetCurrentProcessId
GetCurrentThread
GetExitCodeThread
GetModuleHandleA
ReadFile
SetEvent
SetUnhandledExceptionFilter
Sleep
TerminateThread
VirtualAlloc
VirtualFree
VirtualProtect
WaitForMultipleObjects
WaitForSingleObject
WriteFile

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 166B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ