242cdb1cc6e19f481e719106d55df60c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

242cdb1cc6e19f481e719106d55df60c_JaffaCakes118
Size

1.1MB
MD5

242cdb1cc6e19f481e719106d55df60c
SHA1

c01236ade214ae9946757a390103e698c9cd8522
SHA256

6852dedca03b26911b044966580ec802ae74814616d21c559fbcd4cf8e88461a
SHA512

84fd91b8a78f15b773192e1d5cd5957ec303b1aae73143ec4145162f640e85969f21f4d61e63ccd311023a765715f4a8a1d5e5b4f4a05bf3472c7a89c33a823e
SSDEEP

24576:n2io5DAbVroEIELL67Bzpw6jHH0l7R06RHxgzvKwV1hev+yZw:nY5DOVsJGLoBmIHUpMzvKwpeWQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
242cdb1cc6e19f481e719106d55df60c_JaffaCakes118

Files

242cdb1cc6e19f481e719106d55df60c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ