35e76d13030192ad1815f556e214c6c4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

35e76d13030192ad1815f556e214c6c4_JaffaCakes118
Size

388KB
MD5

35e76d13030192ad1815f556e214c6c4
SHA1

313be8b2fea6634d8def6f43d0110c9e7b29b136
SHA256

fce5bbab4ac102adbcbbdd1d29568a5416894b6bb710dc73fb42173e286e5a9c
SHA512

fb8d8b45a636fbf09e79297de2322fac8f9874203858528012b9c26c793035e2c121ff0caa5e25df51c0f25b7e6557568f72ef51d96a6b0bcdaa8524cfcc80d7
SSDEEP

6144:pM5P/7VB2c8sh/7yL29HbzBlcLefnMNhcqvFRMEe+eIkpDnouVlq+zHLvD:panr22lfbcCfn4Fm7pTxzr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
35e76d13030192ad1815f556e214c6c4_JaffaCakes118

Files

35e76d13030192ad1815f556e214c6c4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 772KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 383KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ