afe69d6097a8cffa9ed1a2443b86543d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

afe69d6097a8cffa9ed1a2443b86543d_JaffaCakes118
Size

381KB
MD5

afe69d6097a8cffa9ed1a2443b86543d
SHA1

b4921a529246ba5ff8afa9f0ef0eddd58a34b49a
SHA256

377a3e63af52ae2e253bcfa3b6cbb19bfddf71edf0d3010e58c91f09c0543e20
SHA512

ed420ff2b395239f28294942ea42a09f7243b156fc2bcfd771629fd99a724801380bf526900e5b3467a793c058829a33d188af1e02eeba19ca394b56a3b1bf16
SSDEEP

6144:FYympWchgXVwcqU2t3en4jflXrBmeUGa+6AzwBsKs7+a86a5ueb:F9mKODZecflXroehaRCwKKdafa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
afe69d6097a8cffa9ed1a2443b86543d_JaffaCakes118

Files

afe69d6097a8cffa9ed1a2443b86543d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 772KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 376KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ