645529d98de9550e243177b44f26844d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

645529d98de9550e243177b44f26844d_JaffaCakes118
Size

164KB
MD5

645529d98de9550e243177b44f26844d
SHA1

c1fed53de0eddaeef4b5d3381db37a720078d6f1
SHA256

66bd0b9d15352afcd121497630c4d4fad8af4495ca15662fbce0a03dbf143b72
SHA512

9d58f5b90e4416ec46d299f7ec6e34d84ac1bffa42e31590f74c6838bd7f829d75af0f7194221407bae86e8b67e61dd44b0579b4ece5914af5dd13ed76f8ceef
SSDEEP

3072:OCQ5k3D1QrmeVB8FqPxm09V7x7Oxx8AXkAt5Ph5nk76PHVjMv:DQW3DabVB8FqPxF9NUzPMoWv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
645529d98de9550e243177b44f26844d_JaffaCakes118

Files

645529d98de9550e243177b44f26844d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 292KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 149KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ