53ab199d7e96629072f737d3f5bfcd4d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53ab199d7e96629072f737d3f5bfcd4d_JaffaCakes118
Size

123KB
MD5

53ab199d7e96629072f737d3f5bfcd4d
SHA1

752a2384d25793e5863303f50ec574f0d4691bcf
SHA256

b66f9359060970da83e0f1adfe1e9ca0962044623ebd21ba9bcbafaff7cc7512
SHA512

72cebc8fdd8afb6b3939591b952ecb65f5eec6887000e584af13ef7978b8f7af506b8f3999a582464a2d6bcb842865911e57f5fcffeb7dc3ad1f0279d1caf25d
SSDEEP

3072:nFDGJVzU+Flf6tv1HWRSw6H1fsSXlWedzTUXX+JA7:FC/U6f6ttHWYHqlMm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53ab199d7e96629072f737d3f5bfcd4d_JaffaCakes118

Files

53ab199d7e96629072f737d3f5bfcd4d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

c522be50e9407f36f81523dc2482e942

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateNamedPipeA
LoadLibraryA
GetProcAddress

Exports

Exports

jaliclajxiiw
pbcncrglar
pcpdtnzdvikhbl

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 962B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ