53d5dacc6fa4467fa899edb448921643_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53d5dacc6fa4467fa899edb448921643_JaffaCakes118
Size

96KB
MD5

53d5dacc6fa4467fa899edb448921643
SHA1

3b82d4c4372e6dee08c7a361bf2fdb219eea977e
SHA256

c08b23423eab88c5e362d96644c08b8e8204642e2704c3baed2345a293579eb0
SHA512

4496d31b72c97045b0c62dbbe23f3a9a59b1d709ce0b7108af1978194e47f3e3b36e409c302412f94974f4d6f2348fae59a40fd2f179b03242ab699ef42b5de1
SSDEEP

1536:lbv1mfBVBn7MuT6VpAoU7NX+o3STOARs4h7RmKFzG3f8Yk/5gKNz:lbd0B8ueVjU7NX+o3PUEu0kYkhFz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53d5dacc6fa4467fa899edb448921643_JaffaCakes118

Files

53d5dacc6fa4467fa899edb448921643_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 16KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE