b25d32249fa20bb0022965efa0b13dc6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b25d32249fa20bb0022965efa0b13dc6_JaffaCakes118
Size

150KB
MD5

b25d32249fa20bb0022965efa0b13dc6
SHA1

a7d576d387780fcbb32932b5678dd46d6fb87717
SHA256

eeaaad0faa4ca7fc97a6a5561b128c52553a8a37d53cd63ec31b55615bf64f62
SHA512

7a3e3bdbfaa4787e28f9e096fae59189b171b05403ee618f016480a019ebc94c4dafe84e20817fdc3260bdd8e9fd50a03276df7fd60efb3fa338b0d214f5f8a6
SSDEEP

3072:oHecHJLz6AIIdyQP91NQTA9OeQPYqrZLuoxY1Yg28JINOuUcRjMv:uJ/TIs7V1NrIePq1Luoxz5wIEjv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b25d32249fa20bb0022965efa0b13dc6_JaffaCakes118

Files

b25d32249fa20bb0022965efa0b13dc6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 284KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 135KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ