f374cbe776bb151f59af5fbbb0ab23be_JaffaCakes118 | Triage

Sharing

General

Target

f374cbe776bb151f59af5fbbb0ab23be_JaffaCakes118
Size

490KB
MD5

f374cbe776bb151f59af5fbbb0ab23be
SHA1

eda4bba9c4874daafd80b00c5141152ab665f060
SHA256

4bf4c7ff06da9ea2ceca1c08d04b7dd87ef4aba4413eda8189c7671aa574e790
SHA512

4acbcbd421c2e3417a2f28183a2429ab30b2c7ade4a380521b3ae4da1414423b856259e87688610d88e8d10ace423f99f9ab8e99bfab733497ca3a6fd3be11d3
SSDEEP

12288:bTpp3UtLhpraBWZsSwMStD5A1nyH3siGXX:bTpp3U5zraBqsSwMsDSQa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f374cbe776bb151f59af5fbbb0ab23be_JaffaCakes118

Files

f374cbe776bb151f59af5fbbb0ab23be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 972KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 484KB - Virtual size: 488KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.artmeis
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE