0bde34249674a99b9594b5cc92b97f89_JaffaCakes118 | Triage

Sharing

General

Target

0bde34249674a99b9594b5cc92b97f89_JaffaCakes118
Size

511KB
MD5

0bde34249674a99b9594b5cc92b97f89
SHA1

75209b5b646bc45be292c1cd887f8ce48de7d4a0
SHA256

dba494dc9709fdf39c22d89db3ea5f2142a36daaf6ec2125f3bf6822d92900a1
SHA512

c58293c25269de1a14c923f2d6eadb690ff66bb951daf73e3fddef21351828df52e7b598f118b8e8ddf5f8aff9e71ca885ac9020fe6060959c6c7875981a9336
SSDEEP

12288:njenaDMAAp2sqEbHgKARPX2vTV8lUk1/yBWFMLy4TK:nj5MVIcbHeRPg5S/yBWJ4G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bde34249674a99b9594b5cc92b97f89_JaffaCakes118

Files

0bde34249674a99b9594b5cc92b97f89_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3504e594471d61f06cb2387ff317abfe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

comctl32

InitCommonControls

ddraw

DirectDrawCreate
GetSurfaceFromDC

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 481KB - Virtual size: 484KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE