kaiten | 001a09d3c1f8628684b162df83d154af_JaffaCakes118

General

Target
001a09d3c1f8628684b162df83d154af_JaffaCakes118
Size 23KB
Sample240619-xtcwvasbnp
SHA256 8cf6bab1228f345d7ea877547a4de3fe0dab1d81c7cfa18d6f1385013463f129
MD5 001a09d3c1f8628684b162df83d154af
SHA1 415040dfc1196080665d86345c4b61c2017240bd
SHA512 f409c2d8f6cc83466dcc24211529f770cf24430adb42b53f56cdf52aa630937e562dd2c98626cc52eab07bd3f17b93f52ee01c7b456ea1e51e725421842814db
SSDEEP 384:PwswvxVtctcg1lNyxLlNfQoc7iCxtVFHhddnkQbuCfFQDRSB:Av7tc6g1etIp79XTfFd
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

kaiten

Detects Kaiten/Tsunami Payload 1 IoCs

resource	yara_rule
sample	family_kaiten2

Detects Kaiten/Tsunami payload 1 IoCs

resource	yara_rule
sample	family_kaiten

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
001a09d3c1f8628684b162df83d154af_JaffaCakes118

IMPHASH 4921c1ec8a6876d2002a7bcba5a18caa
SHA256 8cf6bab1228f345d7ea877547a4de3fe0dab1d81c7cfa18d6f1385013463f129
MD5 001a09d3c1f8628684b162df83d154af
SHA1 415040dfc1196080665d86345c4b61c2017240bd
SHA512 f409c2d8f6cc83466dcc24211529f770cf24430adb42b53f56cdf52aa630937e562dd2c98626cc52eab07bd3f17b93f52ee01c7b456ea1e51e725421842814db
SSDEEP 384:PwswvxVtctcg1lNyxLlNfQoc7iCxtVFHhddnkQbuCfFQDRSB:Av7tc6g1etIp79XTfFd
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

4

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths