0ab8595f01e5898b1291fdb76053a553_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ab8595f01e5898b1291fdb76053a553_JaffaCakes118
Size

504KB
MD5

0ab8595f01e5898b1291fdb76053a553
SHA1

a89af9eff1e378eaa9c55bb605578b9c75fa276f
SHA256

e4819f1a04e345e7ca7b8dddc3f4296ff0bb27722ba83f94d03325391f87465a
SHA512

53f3e51d5dfbea1d49e60764a16d4297ac80d16e6bc88d30e526b9feb1a7c8a8f206fec08afe3426349b4fdabddac64edf7968bfe433dcc1d800f5e172e244da
SSDEEP

12288:LLnN62azLnDMr27B0UIfAFIA3nyCcHRqMpNcMBHO:HjazrIr27BgAFp3iqMpNcMBu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ab8595f01e5898b1291fdb76053a553_JaffaCakes118

Files

0ab8595f01e5898b1291fdb76053a553_JaffaCakes118
.dll windows:4 windows x64 arch:x64

f2676216cdeaf8f2cd2c8704bd246c60

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

kernel32

GetNamedPipeHandleStateW
GetCommConfig
SystemTimeToFileTime
CreateConsoleScreenBuffer

Sections

.text
Size: 161KB - Virtual size: 163KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.23v4523
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.v23
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ