53bd0e6557bdd9596dfcf2a2490f9167_JaffaCakes118 | Triage

Sharing

General

Target

53bd0e6557bdd9596dfcf2a2490f9167_JaffaCakes118
Size

92KB
MD5

53bd0e6557bdd9596dfcf2a2490f9167
SHA1

c52af0d10941bb9348f994d9614972f105dd9716
SHA256

be110e097917d3533004447dec2821fa461fbb22a908e6d591a5fd45565bfa25
SHA512

e078b976dbd7905aeafbde5c98dc2e7b336621905706e18caf6f1bea5a889e6dffaf33619aafd8b0f6bdf65da12b65d876c6030a3fdca30a8d0361cd76a6325c
SSDEEP

1536:hRLFB/HeWt/Y/6WpKdVikluoqZVUIkDrQS8DiulgrL4Fmtjff:hRLFB/x/NnR3qfdkPMikdFAjff

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53bd0e6557bdd9596dfcf2a2490f9167_JaffaCakes118

Files

53bd0e6557bdd9596dfcf2a2490f9167_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6cb0f215e0d9138ff15ee7dd8717cb3b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
DeleteFileW
DeviceIoControl
ExitProcess
FindFirstVolumeMountPointW
GetACP
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetVersionExA
HeapAlloc
HeapCreate
IsDebuggerPresent
LoadModule
SetComputerNameExW
SetDefaultCommConfigA
SetLocalTime
SetTapeParameters
lstrlenA

user32

LoadMenuA
EndDeferWindowPos

comctl32

ImageList_DragEnter
DrawStatusTextA

ole32

CoCreateInstance
CreateAntiMoniker

dbghelp

SymLoadModule64
SymSetContext
FindDebugInfoFile
SymEnumerateSymbolsW

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ