4ba9b52a4a89faf3b2b3533ec69368be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ba9b52a4a89faf3b2b3533ec69368be_JaffaCakes118
Size

328KB
MD5

4ba9b52a4a89faf3b2b3533ec69368be
SHA1

e497119fe3d61e9f883ffd9879ca63533621883f
SHA256

00550abe607435b93f5fe2a43dd97cf8386e0d3a55c667c15501dac2b4752574
SHA512

8fc4b2073448af043f84b98dc0a88efb317871d140ed4d76227c03df8b2198adc02e5ca9d8eaa433158ab1e4f85f81f2d64f87075e58cc5c241af0e3e17818d1
SSDEEP

6144:d8wCHPxVl9fomm9VcszBWsKov/rVCNjYSyIwgQ9cyzir:n0x9QmuzBHvrUjEd9zir

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/abel_loader_generator.exe

Files

4ba9b52a4a89faf3b2b3533ec69368be_JaffaCakes118
.zip
abel_loader_generator.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

text
Size: - Virtual size: 764KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

code
Size: 317KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
abel_loader_generator_usage.txt
file_id.diz
history.txt
learning_ability.txt