4c71b4ecca8b3cf3c83cd407eebed76c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c71b4ecca8b3cf3c83cd407eebed76c_JaffaCakes118
Size

420KB
MD5

4c71b4ecca8b3cf3c83cd407eebed76c
SHA1

adf94b858b662389517e35d9d5f82fe66eafe26c
SHA256

bdfd854d6fa6da74d7dcd0cc83c5c423336b894a9954a77c4ef1a9f48c890dbe
SHA512

fba9aa31f2a046ffc0eff01f0f2863ac10303e6970f00f6b7283ecd043f33325de8abea464ea9a3e3f693099405f458c4f017f3254c81ad4f018210b00644de6
SSDEEP

12288:JaSsBKL35xWiKiwUu4i+lDySDFsf/NksSW:JtfKR1ojJyGFs3P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c71b4ecca8b3cf3c83cd407eebed76c_JaffaCakes118

Files

4c71b4ecca8b3cf3c83cd407eebed76c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 884KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 415KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ