2c6a5e254c086f6f3d8a2db4a99b7b39_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2c6a5e254c086f6f3d8a2db4a99b7b39_JaffaCakes118
Size

64KB
MD5

2c6a5e254c086f6f3d8a2db4a99b7b39
SHA1

9aa232d8b5809f8431faa0db2bf30e3d88720b10
SHA256

215ecbd91df2c1467d408569e1aea0112c216a5d16cd027c9f533041ba93b474
SHA512

9d5ed4375876821a3a893c1071157907269902c27620659f6d31cd2136978359cb6cc70c02ebf1308a79239af2e95f59fb2098ea55775771431628f25a0e8760
SSDEEP

1536:cwAVaHgcF14+IGp0R885l5lTsGvHYk7LjvYm:c6Ao4la0W8VlTscHYk7PvYm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c6a5e254c086f6f3d8a2db4a99b7b39_JaffaCakes118

Files

2c6a5e254c086f6f3d8a2db4a99b7b39_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 168KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 62KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ