0abde4ca1a473b6d8bb53f5c8c99ce2e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0abde4ca1a473b6d8bb53f5c8c99ce2e_JaffaCakes118
Size

16KB
MD5

0abde4ca1a473b6d8bb53f5c8c99ce2e
SHA1

7ab1be6dbd702cca44d372799fc286ccb690e7cd
SHA256

854641fe9fa40739a6b796459b9804d6a2788f161439bfb72464cccceb8623d4
SHA512

4f7c0e499c0031f6286d3a5a294fed93c067d477557a7296c8b6e9c4d63a9071ba5bc769677a4d5240cedcf75e88a0fd54c873bbaa533218a9be1f466129d0cd
SSDEEP

384:HjF07jTBEzWpQajax1QUs+u5cObEi4WA:GFEYc1QUsdKiC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0abde4ca1a473b6d8bb53f5c8c99ce2e_JaffaCakes118

Files

0abde4ca1a473b6d8bb53f5c8c99ce2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7534c01e2ab4752705a42e732eec5c46

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wvsprintfA

kernel32

VirtualAlloc
GetProcAddress
GetModuleHandleA

gdi32

GetTextFaceA
GdiComment
AbortPath

advapi32

CloseCodeAuthzLevel

Sections

.text
Size: 512B - Virtual size: 190B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ