658bbb22381f345be0a528559db239c1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

658bbb22381f345be0a528559db239c1_JaffaCakes118
Size

300KB
MD5

658bbb22381f345be0a528559db239c1
SHA1

ff7321e74f666e27324e6cf455c4643604bd8094
SHA256

85ba05ca7401ed15cd04cde4c52fa91242e72bb2037d15d2231126b38b653c7e
SHA512

c65222e73a8b0c47817ea6a5cd05c07f839087c44f0e276da12578e04cbabac56f8848b5eb2e343b89291c0be7204eff4937aa11a54120d1dad40846cf8da26e
SSDEEP

6144:OXwZxN9o+X/g2cKPfUjaLA95EMDOeDnlEyvsAZawpz5cQrbayZl0:OGBgg3Uju+Ere1sAzhSUC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
658bbb22381f345be0a528559db239c1_JaffaCakes118

Files

658bbb22381f345be0a528559db239c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 296KB - Virtual size: 300KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ