484c0549b32293a80dba0e1cb1cbc1ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

484c0549b32293a80dba0e1cb1cbc1ed_JaffaCakes118
Size

439KB
MD5

484c0549b32293a80dba0e1cb1cbc1ed
SHA1

8f3d1cd383a6bc1f277349126af8cae687a1f0dd
SHA256

2bd690082e7107305f8c0782135edbc07d5e59a5efd8d02b4a69148c18ed15f5
SHA512

3d6b9939e3153da6b7cce6be8e6576ed5e8acb97a429e3096d651dea3169379c61d7e321d5eb39916a965a5f9e2eee89442f1fd1589732e4d678e328e4ad7a4e
SSDEEP

6144:8KJcaNCcU4OxJ33lmPPdz9lQl0RrhGH7VQnbDjP1pROIjTC2AIGhNJ0eceAxR7n:3NCTJHlmP26qCbntpYIpA7ZH27n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
484c0549b32293a80dba0e1cb1cbc1ed_JaffaCakes118

Files

484c0549b32293a80dba0e1cb1cbc1ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 816KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 434KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ