646a0169221718e72691eac6f75d207d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

646a0169221718e72691eac6f75d207d_JaffaCakes118
Size

491KB
MD5

646a0169221718e72691eac6f75d207d
SHA1

5ff3a0a81d40eca25cf0a4b06e8dfb30ff26b6f7
SHA256

4e1a426b1746ce7cfd9eec19dd7fbe17beae1eda8dd970a03494a8382f0f84c3
SHA512

4e711821def0536341294ec8e990e9bfcddc734b3cd56b7348678d6d0755ea5c7ad692ec13c2daf853c9a28bc58abb502c2a39d4c5a76adf5f5606bb7848fcbf
SSDEEP

12288:TTpp3UtLhpraBWZsS2MStD5A1nyH3siGXC:TTpp3U5zraBqsS2MsDSQp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
646a0169221718e72691eac6f75d207d_JaffaCakes118

Files

646a0169221718e72691eac6f75d207d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 972KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 486KB - Virtual size: 488KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ