0ff57902383c49bc1a61ab67b9107924_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ff57902383c49bc1a61ab67b9107924_JaffaCakes118
Size

16KB
MD5

0ff57902383c49bc1a61ab67b9107924
SHA1

1d4bd6ae20048714eafe3d025a4fdf3b28c7deae
SHA256

8840181b89aef7e6a68a99e8a3a18777d3d909686762f12c10af2f479fa9dd84
SHA512

9ba8515e9cff3a51c0754a384eda7059b47b406c2760c5a2069c6c5ae0bce0523bebe2516b0d74930f206d6e05694ad5118ca3774befcc1080802bca944577b6
SSDEEP

384:OsDepTP0b87af7dq/X2GstOOvfX5u9jf1:Ob7aJM2GWO4xutf1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ff57902383c49bc1a61ab67b9107924_JaffaCakes118

Files

0ff57902383c49bc1a61ab67b9107924_JaffaCakes118
.exe windows:4 windows x86 arch:x86

abd41a333313cb75bc4377651e05c715

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
ReadFile
GetModuleFileNameA
CreateFileA
CloseHandle

advapi32

BackupEventLogA

user32

AppendMenuA

Sections

.text
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 310B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ