c23a930b7393d1d86b86a657d8732aaf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c23a930b7393d1d86b86a657d8732aaf_JaffaCakes118
Size

339KB
MD5

c23a930b7393d1d86b86a657d8732aaf
SHA1

89d83cc6d52f48b1b05e05c586465e3ca394c565
SHA256

352a5d70ad02b7fb76909fcd287c5948befa47737ba4d996d61c9b144fd306c5
SHA512

111b94b50237b8c52553536cffa8d5f3f55c8f3658a2422ac09a9020da0b478786de648801acea1233b59ab14b76bee9dd60805054dd04e8c9492747e3b28fc0
SSDEEP

6144:p2FScz74uN6TRns7iZm3LmmqcKclb/4rTohevjfFA8Aa8NtfuU+Pk8ROjVNjch0:QScz7t4fkLmmx9bwxEfuU+PqNn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c23a930b7393d1d86b86a657d8732aaf_JaffaCakes118

Files

c23a930b7393d1d86b86a657d8732aaf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 335KB - Virtual size: 336KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ