786f010697dfa5acc0c7406b0e6dbd39_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

786f010697dfa5acc0c7406b0e6dbd39_JaffaCakes118
Size

690KB
MD5

786f010697dfa5acc0c7406b0e6dbd39
SHA1

044021d23285d9e2beccc0e6997c6c92c63882f5
SHA256

d2d2db8234846e1a33e5016aae9dcb4032d95ce681fc687f0e780cf35f7608c6
SHA512

71fe71b3e8571a74c952788f65b52434a887795d391478bbfbad3169b822f1f5ab611322829fbadee08e4b2550140e3c8a69053358edf2aefd874d4489fde40f
SSDEEP

12288:AAle3odKUhWWCpQPWU6L5AKLmMpCb3kFte1q4I+4O6JPCx2+64skg6UmdBLcvqF:AAl4ahWWYQ+NL2b3kaqRNOY7Oskg69dR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
786f010697dfa5acc0c7406b0e6dbd39_JaffaCakes118

Files

786f010697dfa5acc0c7406b0e6dbd39_JaffaCakes118
.exe windows:5 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 668KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 687KB - Virtual size: 688KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mmym520
Size: 31B - Virtual size: 31B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ