31b3fd9f583c7d5b8a14c1eaf8da5efd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

31b3fd9f583c7d5b8a14c1eaf8da5efd_JaffaCakes118
Size

270KB
MD5

31b3fd9f583c7d5b8a14c1eaf8da5efd
SHA1

44ebb001198e31d47d2b4f4c487e26ae6c5d0d07
SHA256

e02a9f39b15da98ced18a6d4cd88cdf070a4511e1a2370715d664c3cd0d227aa
SHA512

ba13f898a3546cb5ceffb452c50cb3d5d1986fa4905a5e9e491c75eba81ac9a30509bceceb54fccf627d511d456b8a8a70afecc0b35c4b269775626f6fb071ad
SSDEEP

6144:gnfKy/IRY7fq23Y5eZvaNPi9qZaXtBAYPI5p5f:gfJ/IRY3YEkJi9qsAJf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
31b3fd9f583c7d5b8a14c1eaf8da5efd_JaffaCakes118

Files

31b3fd9f583c7d5b8a14c1eaf8da5efd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 564KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 268KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ