05622fbe5df7bd7c6ef5609e7c9f245c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05622fbe5df7bd7c6ef5609e7c9f245c_JaffaCakes118
Size

938KB
MD5

05622fbe5df7bd7c6ef5609e7c9f245c
SHA1

7bb5a450e403e2b778f58acfc3fbd9ec57f6c168
SHA256

3ed5f593cc0bf3d37c47dcd5903cb1e6d1441ebbe9b52ee77a2b207320b803fd
SHA512

5af5e6bb4174239a18d29d5649d8a2a97f5bf3c7f3f79a770b5faf4c0a39e34b785a9d359f08b8918ec67e77f17bec763b2510e946fce68660b7df1fb6c075a3
SSDEEP

24576:FXCOuk0FvCxUnrJa47f7jiV2D+bMb+YF5nLo:FMq0rA4Tivolg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05622fbe5df7bd7c6ef5609e7c9f245c_JaffaCakes118

Files

05622fbe5df7bd7c6ef5609e7c9f245c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 933KB - Virtual size: 936KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ