0aebe34ad926a2b67b604e8d4005cabf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0aebe34ad926a2b67b604e8d4005cabf_JaffaCakes118
Size

820KB
MD5

0aebe34ad926a2b67b604e8d4005cabf
SHA1

89460ada44afe79c547bd6fa2d3c32a5019701f1
SHA256

ec86d07494d9d68a42b08feb6ea1de14b71fa35e8f75279d14086def07e64446
SHA512

f73f7dbf1a167e73c5d7f2b9f4e35b1078a481734337bfca50a80943f7dd6723fdc8d225b9d5ccf3eb5c4d2d39b8786461cc368ff6287f002389be6398f8b79d
SSDEEP

12288:g6JKgjUFjtxpjuuWC4h/KlsNGlEB19u2gBBFmQNrCMxIjaODn/otOUf1EOkz2cBC:4gjUlt+XnMLYuPfrCuIja+nu1HFhD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0aebe34ad926a2b67b604e8d4005cabf_JaffaCakes118

Files

0aebe34ad926a2b67b604e8d4005cabf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

238ffc3b7fb9463d5b1e177d9ef71435

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

TlsGetValue
WriteConsoleA
FormatMessageA
CreateEventW
GetModuleHandleA
GetCurrentThreadId
GetCommandLineA
SetCurrentDirectoryW
lstrcpynW
GetStringTypeW
DeleteFileW
GetFullPathNameW
lstrlenA
GetPrivateProfileIntA
VirtualFree
TlsFree
SetThreadPriority
VirtualProtectEx
GetModuleFileNameW

wmadmoe

DllGetClassObject
DllUnregisterServer
DllRegisterServer
DllCanUnloadNow

Sections

.text
Size: 14KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.ndata
Size: 797KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.qdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ