dafd52819aaa27662a77e319ecbda0b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dafd52819aaa27662a77e319ecbda0b8_JaffaCakes118
Size

653KB
MD5

dafd52819aaa27662a77e319ecbda0b8
SHA1

f4ae023fd580bf4ddcad1f6fe772174e53ce8962
SHA256

cce1b51a647e8df55c383089d8f4cc6ea38a32ec5f3e8e7a0635ed2a93851f36
SHA512

099fd169e3ab1394ec7dc487950d30cd3d6aa24e16cd32e7686b8e2828a6bfc8325eb9d8ba196fdc521c20a045474238766e7b95cf47e59f586ec43b328fbf85
SSDEEP

12288:BaMZafXvZZi8BfMD7w4dbkK4cU2cXJ+u/8cO/MaRVKn5FZX:BxE/hFZMXlkK4Qu/8cMMaRVK5FZX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dafd52819aaa27662a77e319ecbda0b8_JaffaCakes118

Files

dafd52819aaa27662a77e319ecbda0b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 648KB - Virtual size: 652KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ