3ea00683fa0531a59d5c388145821bd9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3ea00683fa0531a59d5c388145821bd9_JaffaCakes118
Size

440KB
MD5

3ea00683fa0531a59d5c388145821bd9
SHA1

e8c8acaf2fe54f357352346dc07a47855def5597
SHA256

c715423900f94f8ef82cd516df254eb477fd9290e1e3e8217368048a0de07233
SHA512

a78b52a0a656ecb15423db887c064a7eb190a74ee7946bf4873139beeae4d128efbc23ce4c3e2e3e074ca939cf540c8b2edf9a1ea261696e5362831f5435895e
SSDEEP

12288:lquO7KU+wuKUMgU4PyfrXYMflutxX/ZB5sj8Nq:lqrGU/uKUMjLrXYMfQx+j84

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ea00683fa0531a59d5c388145821bd9_JaffaCakes118

Files

3ea00683fa0531a59d5c388145821bd9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 436KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ