122ab90156e0472f46f7de22169f6453_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

122ab90156e0472f46f7de22169f6453_JaffaCakes118
Size

319KB
MD5

122ab90156e0472f46f7de22169f6453
SHA1

b00c7f3e83d1a58b13680803432b3c62527f808f
SHA256

437d96307e4f897f992cc80b880f2e85efd3b3ea0e754e7070b155df5da3a380
SHA512

e53d1dbf95a1ad9a2992935278950fb5a1ad8951cf58ea1ba49e334920d892b64d56e84cd5dcba99617881818ce73ce643a13ce440484879774897a74a143589
SSDEEP

6144:XENY5XCGPDiWvf3AJ1NUSGNMOb92jMHCycD3pPzF3uIAvzQI6Z:XZXzPtuNUSGNMOb92jMHCyc9P5+IAvz+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
122ab90156e0472f46f7de22169f6453_JaffaCakes118

Files

122ab90156e0472f46f7de22169f6453_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f726bd7f1f33fe7f5b219a2a5b49f3c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
CreateNamedPipeA
GetProcAddress

Exports

Exports

ojtcfzxbu
xjtrkoxx
ycjlhqoftunp

Sections

.text
Size: 305KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ