64878469668977beb0edb8d81df20ca1_JaffaCakes118 | Triage

Sharing

General

Target

64878469668977beb0edb8d81df20ca1_JaffaCakes118
Size

381KB
MD5

64878469668977beb0edb8d81df20ca1
SHA1

528c0df03fa1356b06a4985f4b5747f952e93f99
SHA256

75cab67ec5b65d3660087ceb2e66556701cc5afaf319c16db4908a032ccaec51
SHA512

d1bfd0ea7b91551de31b68f3472b9e94f6d26be8fb0aae09496c12b05cf246052efe52e377aacd1df542bfa63d77be598bf477042790c00e2bb588b6a9d47224
SSDEEP

6144:GYympWchgXVwcqU2t3en4jflXrBmeUGa+6AzwBsKs7+M86a5uebO:G9mKODZecflXroehaRCwKKdMfaW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64878469668977beb0edb8d81df20ca1_JaffaCakes118

Files

64878469668977beb0edb8d81df20ca1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 772KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 376KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

www.xjzh
Size: 512B - Virtual size: 520B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE