f4f869db94850e98d4e45240fcb38b54_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4f869db94850e98d4e45240fcb38b54_JaffaCakes118
Size

275KB
MD5

f4f869db94850e98d4e45240fcb38b54
SHA1

14c9bfa2dd8c2ddc3894cc8e3bcb71cc97873454
SHA256

6cd5067d878b27370b967ed5c8babe2f85fbca48dc5c69a8b359b08d70b25baf
SHA512

dd83e0e36e8f789febd2806f7a63ccba163aaf27efe42b6718f20f2beacffd10c0ec1a1426e8a01ce45240eb7807740224c7a922eb47205ded77aad8a8a0dbe4
SSDEEP

6144:nNOKDAllPbpOIqoONzixxLToLQAy3B6FGnUH:nNFuzpOIPSzijoU7x6FGUH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4f869db94850e98d4e45240fcb38b54_JaffaCakes118

Files

f4f869db94850e98d4e45240fcb38b54_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 592KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 273KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ