0c4c8cbfbcc7264461c7a78d6dcb6224_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c4c8cbfbcc7264461c7a78d6dcb6224_JaffaCakes118
Size

15KB
MD5

0c4c8cbfbcc7264461c7a78d6dcb6224
SHA1

ce9d4ce586abe1bc2681158aebb7917d76f3c35b
SHA256

01c1630af64ceced616d41a4be8a445c33d85efa3eb99d9417c1b95ecc2f5b12
SHA512

89c94c34f86cc37d6db635a22383abc6297ab46bfa3f7895447dad45d32bdc383fcbdd538527571af88f7f6cf3afc58bdca4cca462fdf7e0f05610bc6abb5994
SSDEEP

384:HLIOdu/yhnl8lETzSTW3j5RAVINLI/VginuXl:rb1lHT+uCV0s/V5u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c4c8cbfbcc7264461c7a78d6dcb6224_JaffaCakes118

Files

0c4c8cbfbcc7264461c7a78d6dcb6224_JaffaCakes118
.exe windows:4 windows x86 arch:x86

21c68b7f91102455a9bf13fc27709d50

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetLastError
DisconnectNamedPipe

Sections

.text
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE