53e96dcc0b96918595c5eda2a0ef1a77_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53e96dcc0b96918595c5eda2a0ef1a77_JaffaCakes118
Size

74KB
MD5

53e96dcc0b96918595c5eda2a0ef1a77
SHA1

2e47a8b48fa1159af0b1ffbe04725e874d8e23d1
SHA256

dbb8a1a055e5a788cba57a02eabd06e9c00ded67e987cc40971ff67b5534dccd
SHA512

6745f491d85477d647089b59067618b7a7bdc80c7cb4e54e1dff5059f2f032cb1aa65df99c87cd70c73a234d225b11a7c99ed9f5b74dcb76f46218a680a3355a
SSDEEP

1536:HBU4S58O0zJoX5LyiIB+tVGSPcVBwb3TwqzBJC3Yp:H8REoXPtVGSUVBwb3zBJC3Yp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53e96dcc0b96918595c5eda2a0ef1a77_JaffaCakes118

Files

53e96dcc0b96918595c5eda2a0ef1a77_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f79331c6b43c060485f9f22422ba5fcf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoDosDateTimeToFileTime
CoAddRefServerProcess
CoGetInterfaceAndReleaseStream
OleQueryLinkFromData
OleRegGetUserType
CoGetObjectContext
CoResumeClassObjects
OleLockRunning
CoCreateInstance

kernel32

Sleep
ExitProcess
GetSystemTimeAsFileTime
GetCurrentThreadId
FormatMessageA
lstrcpynA
GetCommandLineA
GetTickCount
GetModuleHandleA
GetLastError
EnumDateFormatsW
CreateSemaphoreW
DeleteCriticalSection

msvcrt

_stat
_vsnwprintf
strtoul
_onexit
_acmdln

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE