82a514b98f5fa746bfac894fdff4a884_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

82a514b98f5fa746bfac894fdff4a884_JaffaCakes118
Size

316KB
MD5

82a514b98f5fa746bfac894fdff4a884
SHA1

af5044c88d89faf7b0a2b9918cb1baaa8f19d4b1
SHA256

6b6e414333d39928dd848db58ff1f727f316c32882221fd5437fffc7ab592efe
SHA512

0c8dd4ac955f72e6af086945c66d0cc3e57f9c3d3df0320139535de9478e011c25f980afb2236ba8f676ffc9837cf075ec5c27205852799e391cb9210de6f750
SSDEEP

6144:QvD5QURgEYZUHkgMFSQuBmRGbfY5uaEFCBYZ4/q8t0qhx9aqh4/t7Ju6:QdEhhFzu3bfVDF2M4Iqhx9am8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
82a514b98f5fa746bfac894fdff4a884_JaffaCakes118

Files

82a514b98f5fa746bfac894fdff4a884_JaffaCakes118
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 416KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 310KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ