c95dd2294adbdb04667717f29a9de91a_JaffaCakes118 | Triage

Sharing

General

Target

c95dd2294adbdb04667717f29a9de91a_JaffaCakes118
Size

172KB
MD5

c95dd2294adbdb04667717f29a9de91a
SHA1

369147927fe5205f6ca97b3eda3ba20132eb62e6
SHA256

96aac6fcff47c3ec01b13bf6f916e7ee15e33daa781f62f0efbc9a648aade23d
SHA512

e648a88b05da970a8f8f6dbf675d6073dc53e97780f4fde3e27658c8e7a900eb67fee303e25c3d3b1262acbbc7ca6114371adea17e4f2565d4bd77880ce6432e
SSDEEP

3072:ToeFw78z1tmz2FGyDkZjGms9wR7gvix62VN3aVvpek:XFIue2FLajGm6w4uk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c95dd2294adbdb04667717f29a9de91a_JaffaCakes118

Files

c95dd2294adbdb04667717f29a9de91a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

341a8f8efd3b5e4edac04d8c14a98f12

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CallNamedPipeA
FreeLibraryAndExitThread
RegisterWaitForSingleObjectEx
CancelIo
DeviceIoControl
CreateNamedPipeA
VirtualAllocEx

credui

CredUIConfirmCredentialsA
CredUIConfirmCredentialsW

gdi32

GetDeviceCaps
ChoosePixelFormat

dplayx

DirectPlayCreate

d3d9

Direct3DCreate9

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 161KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 516B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ