b5b221a249da67a401a7c681ab70a6ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5b221a249da67a401a7c681ab70a6ed_JaffaCakes118
Size

84KB
MD5

b5b221a249da67a401a7c681ab70a6ed
SHA1

bc4fe85173541cc1118b80074cd2cb2f6d480476
SHA256

8cd4cc8edba4f03f60a27ecccdaab841d472dc96ecb9ab30e79fec9e001779b2
SHA512

c186f5b9b00bc9a709d74e28b5219812b4edf0743806d376d756c1f18660d89a47b4335174ed609df9bf6a679d518389e74bd6e62f465ae482a53349cd425f0b
SSDEEP

1536:5ALKjpFUZGMae4XH8jcu6dvnFLu4zigqJZrIwBTqInVOQpvTZesGA9Jq3sltWMuD:kkfUwdee1ueJ+jJZrIiOInV7vTZePA/S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5b221a249da67a401a7c681ab70a6ed_JaffaCakes118

Files

b5b221a249da67a401a7c681ab70a6ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 308KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ