2fc25d73d3b7357806d45a2da9ba65dc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2fc25d73d3b7357806d45a2da9ba65dc_JaffaCakes118
Size

433KB
MD5

2fc25d73d3b7357806d45a2da9ba65dc
SHA1

89e61551bbeb7bcc51c6a00cb3e5f2405808b1dd
SHA256

e067c7b6b013565ac5f25d4a064c47daac773db5116ca94cf557268d91f99211
SHA512

71e448fbad1c16fa3188f98b818a622e53e1a5ad51fa4f1864e50d448979d1fc97a0e09c800858526b798ae91e8bbd6a0068d189ef0088769b2071aec2525799
SSDEEP

12288:nksrBuNVpY6tr+6cl5NKbeOZ60Oceeg/G8AlUd0Pp2evwwT1ZmigU:kMutYR5XOZLg/G8pd44wRGU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fc25d73d3b7357806d45a2da9ba65dc_JaffaCakes118

Files

2fc25d73d3b7357806d45a2da9ba65dc_JaffaCakes118
.exe windows:0 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 800KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 429KB - Virtual size: 432KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ