d5a82218a4c9daac8e7dddc0cf9d7747_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5a82218a4c9daac8e7dddc0cf9d7747_JaffaCakes118
Size

1.6MB
MD5

d5a82218a4c9daac8e7dddc0cf9d7747
SHA1

4cd55551c2702b379a8ee85d71d71b718219eb58
SHA256

63a36cc2499b13840b3996278f59b8609816dfaa84e9b6f09c35ce41b4eb8270
SHA512

a968a1bfad9b6b4c1db5479b7f0f4c134e61e81f30e8bfd6342a25290627036353dccb2fa209f88a44b1f78cea8ea4a6c261acacf78193ca2fd1d6604f7759fb
SSDEEP

49152:iY8aRN3aUWOac4aT2LMoykyUaklrgP+rhp+OtVljbZ:9v3a/64aaLMoxyULc+1MGTb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5a82218a4c9daac8e7dddc0cf9d7747_JaffaCakes118

Files

d5a82218a4c9daac8e7dddc0cf9d7747_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 2.3MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ