17553dcb9a7d54ee95a9b915b1570d4b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

17553dcb9a7d54ee95a9b915b1570d4b_JaffaCakes118
Size

356KB
MD5

17553dcb9a7d54ee95a9b915b1570d4b
SHA1

4ccb1d354243b1e5f9788e55288552fd71b5815b
SHA256

4646c8de1401c43b9b0c9418bbab95560b3bdb94cf4a0d9ab12048ead930d465
SHA512

35226d6caa728e3cb80a7db52d7fffb92a9dff952d8434e7194199b3f5753089ba9bc9f975e5cb751e222de3eaed3cfc4ade35ee0153624bc8989223d9e24db1
SSDEEP

6144:l3XfSnBPxtyel5l2DLJdn4jflXrBjCGhltptBA8wpAR4GpGO:1fGBbNl8NdcflXr9hjptBAgPkO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17553dcb9a7d54ee95a9b915b1570d4b_JaffaCakes118

Files

17553dcb9a7d54ee95a9b915b1570d4b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 772KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 352KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ