e02ab80cf9049ae9620689365c605472_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e02ab80cf9049ae9620689365c605472_JaffaCakes118
Size

694KB
MD5

e02ab80cf9049ae9620689365c605472
SHA1

5ec47c66b79b94b3b010a83b060ccf17e3516279
SHA256

80b87a249bb64d354f01987bca27fece667f008b7fbfc22971e6423c590177fd
SHA512

c4380f957a85d668052f09f2a44b938ef98130158c91a735f0816904b23733e81c427e49a80f0783c60bb52841dd69fc84840cb51ea18b6da671b61ea64b69ea
SSDEEP

12288:HJQxMO/yK/yOhZBcrSPCRknvBVTPXFdKuDoEdeL7IGIrh2yEHAxqi3OKwOcD3kqN:HJQVUONc/qvLlDor7IGIrY3HMleK6Qqy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e02ab80cf9049ae9620689365c605472_JaffaCakes118

Files

e02ab80cf9049ae9620689365c605472_JaffaCakes118
.exe windows:0 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 689KB - Virtual size: 692KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ