68fee395ad9ee36bb61499666fbed625_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68fee395ad9ee36bb61499666fbed625_JaffaCakes118
Size

471KB
MD5

68fee395ad9ee36bb61499666fbed625
SHA1

15b5d8c3f31f0213328b3524ce92831254663f90
SHA256

1b5db3a024d1f6f4ccc9411e1b14bf53c4e88c5f65312fb7fc32f3d097ff68e8
SHA512

b6d7634f1913c4ae06df109e2e46205ec3621975213b79deabbea66fadcf95e796fcd6f350733a3e06067ca28b64e5430cbfff9247acdd9b357f1bc8258d6303
SSDEEP

12288:JFU/9OXxHWI+K8XX2ymVGWa1v22oixS4bo96qILJw1qDkVXw:3BUJbX2ymBa1u2oiTo9Qhke

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68fee395ad9ee36bb61499666fbed625_JaffaCakes118

Files

68fee395ad9ee36bb61499666fbed625_JaffaCakes118
.exe windows:5 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 468KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 468KB - Virtual size: 468KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspr
Size: 50B - Virtual size: 50B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ