53b1dcb4071a2934eb5562f77a8a615a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53b1dcb4071a2934eb5562f77a8a615a_JaffaCakes118
Size

188KB
MD5

53b1dcb4071a2934eb5562f77a8a615a
SHA1

8c45a2b432502cb74ddcba33326a6e1b2c002a7f
SHA256

e0af952127cd6459d2e2c12b8e1522b110dc3e3e8fe7640f09e2a555def02df9
SHA512

490e274783030f48c01bd76592def91c4202e7b59374484cd0d0748661137770d076ba22870198f08aea6a6e353868707ce09b21aee4f101ead1b32f6cb80ce8
SSDEEP

3072:Sk4FCxJHa9Nd5rUjkyU4iZZcAxRhG8jcQQ1Kqu+FebmG2p4VvJ:S7FCx25wjkte1QQ1Q+0bt8m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53b1dcb4071a2934eb5562f77a8a615a_JaffaCakes118

Files

53b1dcb4071a2934eb5562f77a8a615a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b6b071c57a7dc3ff81561a979c850bb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetCommandLineA
GetLastError
GetModuleHandleA
ExitProcess
LoadLibraryA
GetCommandLineW
ExitThread
GetProcAddress
GetOEMCP
IsBadHugeReadPtr
lstrlenW
GetACP
IsBadReadPtr
GetModuleHandleW

Sections

CODE
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ