253b5a01fc34bc4819c3993f4ef61440_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

253b5a01fc34bc4819c3993f4ef61440_JaffaCakes118
Size

53KB
MD5

253b5a01fc34bc4819c3993f4ef61440
SHA1

85c9275b65927db94dbe7220e2644022fd9dc2b4
SHA256

6d7670ef03a468f695cb89e7ef4f20af514cd30b8f1dc53874bd30d86e9f5460
SHA512

0500ee04225c30e5ef89f3e1eadf5b7cff4d79f39ab4479c2231e9d65ddfd646bc0d18806a0ea3a52e08636160286909ccb98776ec5ba9e0bf3af69e94c7c927
SSDEEP

768:Km08QotiCjJuPGw4Izp5d+efcRDMrjPZJIjZPW:Km00tiCjJuPGw4Wd+efcRDMQjZPW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
253b5a01fc34bc4819c3993f4ef61440_JaffaCakes118

Files

253b5a01fc34bc4819c3993f4ef61440_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e5509fc08199fda59c06d2ab67f46dd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

kernel32

GetCommandLineA
ReleaseMutex
FreeLibrary
GetProcAddress
LoadLibraryExA
SetCurrentDirectoryA
SetErrorMode
WaitForSingleObject
GetLastError
MapViewOfFile
ExitProcess

ole32

OleInitialize
OleUninitialize

Sections

.text
Size: 512B - Virtual size: 477B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ