076cd0cd6c45c3f3090d00fc01e5cd5f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

076cd0cd6c45c3f3090d00fc01e5cd5f_JaffaCakes118
Size

587KB
MD5

076cd0cd6c45c3f3090d00fc01e5cd5f
SHA1

849be36c9b6def96807682d5eb40bb5c08a096d2
SHA256

76f42c1ec94fb404c167b1356016a53b667e804965862ccdbb3286e091f15e49
SHA512

e3d8accccbc261f2bac1cd03cfe9aea4437b03271b7f47e62818d227092e34d3430bce4deccf0c9a52ad779b03a532006562e58c5442d4bd0923eab615229d92
SSDEEP

12288:enVMCiM2iHe1Y2Z00v7932beywosooMWyWtwpr/Ik1SaoA57sg:eyE92Z77J2btwosooMWWr/IkcnUs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
076cd0cd6c45c3f3090d00fc01e5cd5f_JaffaCakes118

Files

076cd0cd6c45c3f3090d00fc01e5cd5f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 996KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 584KB - Virtual size: 588KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ