c92ffb319b5abc1c7b33bc9455c1adc3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c92ffb319b5abc1c7b33bc9455c1adc3_JaffaCakes118
Size

689KB
MD5

c92ffb319b5abc1c7b33bc9455c1adc3
SHA1

7132fd68c5e479ad41d01e668ab215d6ed4cd645
SHA256

2808b281808e8a31d73f71c83b2fbca72b456e98abede58523f58373ce05fdfa
SHA512

b1c7b3e4932065133db117915d485ad875792051f0309eb852e35e1648fba31e483c0fb38c42fd9b61f4dfceab38ef46633aecf340a4f240403cd2fdb62b2f73
SSDEEP

12288:KInfBYrfFCqgAt7KraSpYvgLT4IJtG7sC8Q+Zgv/5jS8VJ1qkUU7cdCwiV7bWSkP:KZrQrG7KrcgLT4ITCt4c5+8VqlkLG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c92ffb319b5abc1c7b33bc9455c1adc3_JaffaCakes118

Files

c92ffb319b5abc1c7b33bc9455c1adc3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 664KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 686KB - Virtual size: 688KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mmmym
Size: 31B - Virtual size: 31B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ