d16f3ec52ffad2638f6055142f2c2cb8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d16f3ec52ffad2638f6055142f2c2cb8_JaffaCakes118
Size

43KB
MD5

d16f3ec52ffad2638f6055142f2c2cb8
SHA1

0083ce4dbd9d9847f9fded94cda9e8235d6fe2f3
SHA256

ed5172d60ab1fb702e604beceb856d758d51fe66670ce38b204c72b3578e2bf1
SHA512

dc58e8d438db7d660d5c4227b22190ddd96323e578ba775891374517f722d6a608c0de5bca2764ed6104fdf244066a2242ff6f1c410b930ead8ecae1b088dab2
SSDEEP

768:NRAQ5pzJ+POjzqBSbzI64cE0uUEjt5XQjSnxS6huu12uEg1KN28TGzUP2w:NRAezfzI64cnERtLnP12a1KN28qU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d16f3ec52ffad2638f6055142f2c2cb8_JaffaCakes118

Files

d16f3ec52ffad2638f6055142f2c2cb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ