ecb406cd39e4de7742e144c7728d3464_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ecb406cd39e4de7742e144c7728d3464_JaffaCakes118
Size

24KB
MD5

ecb406cd39e4de7742e144c7728d3464
SHA1

e8cbf067274ca00336f4ab0124ab8bea0d2ebdfa
SHA256

0d35bca4555e0b56028df8c3c2946ba92c3ff5dc72065e649cc796f7bf5c1f5d
SHA512

a3d39b4c8e9790035923aa0dc240ea87f91f18dfe8e032c2c55cec621b8fc33d54be8788a1e261c36f7b0e90ce2114d4f61e7e07020fbafa60f93c7ecd130645
SSDEEP

384:y7Tgrqxa1TQAEM50vs/X1VCgFegN6Ctq9sg:bAa1kA2U/nCeegNTtqeg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecb406cd39e4de7742e144c7728d3464_JaffaCakes118

Files

ecb406cd39e4de7742e144c7728d3464_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 268KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ