25ecdee46154d1eec1f625a284155057_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25ecdee46154d1eec1f625a284155057_JaffaCakes118
Size

1.2MB
MD5

25ecdee46154d1eec1f625a284155057
SHA1

3b43b4ba5a6e774cc31854c4255ebd04c20b5b7a
SHA256

e41fcc19b320337d347d54d279d991d10d2c693aa9418092081d2ad499fe8a11
SHA512

fb0eabba3717ed9e8fa10ffc83dd1373324f08a9c74b0df8804925d2489a195776b86bb7997b38716f06975864a17b3e9c9f776b187d4309d9d3c0c9d2c71591
SSDEEP

24576:1eUnNI4WFxmf0ANYd/a3a8Du0YNSVcdxQMk8HN9JO:tI3FqySL2TQhw9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25ecdee46154d1eec1f625a284155057_JaffaCakes118

Files

25ecdee46154d1eec1f625a284155057_JaffaCakes118
.exe windows:8 windows x86 arch:x86

5105ce86b4037410d626aa77c2570be2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
GetFileTime
HeapCreate
GetModuleHandleA
SetThreadAffinityMask
ExitProcess
ConnectNamedPipe
HeapFree
CloseHandle
GetLastError
CallNamedPipeA
FileTimeToSystemTime
GetCurrentThread
CreateNamedPipeA
UnmapViewOfFile
GetThreadSelectorEntry
OpenThread
HeapDestroy
CreateFileA
lstrlenA
HeapAlloc
MapViewOfFile
ReadFile
CreateFileMappingA
SetFilePointer
HeapSetInformation
OpenEventA

Sections

.text
Size: 928KB - Virtual size: 928KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 247KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 716KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ