715318b13d651d6dcf489a150f946b20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

715318b13d651d6dcf489a150f946b20_JaffaCakes118
Size

89KB
MD5

715318b13d651d6dcf489a150f946b20
SHA1

95514c1732afab87ddb882766d889753130896a6
SHA256

9d39b7a2fb00f45afe6f8df81d5f0d09e57be66e2310b3ba382c9829cf9d2f97
SHA512

62ccad5f7112c621c7b4751e85e86a48b68d093febe05422ce992d1ac87dcdb9458117f6275fb80a0d39d7769f3838f3fc5aabe7453745b7c3478bc88904c046
SSDEEP

1536:FAERZRz5KMMJaCjTWnHXMdL6Fad/F/Ik2WlTL8FHYP5rzOh8N1:hR3zgZECHWHqL6IdFIk2W58iPhCW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
715318b13d651d6dcf489a150f946b20_JaffaCakes118

Files

715318b13d651d6dcf489a150f946b20_JaffaCakes118
.exe windows:0 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 116KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 87KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ