faf2e144004ad6fade63712bd323ebc5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

faf2e144004ad6fade63712bd323ebc5_JaffaCakes118
Size

700KB
MD5

faf2e144004ad6fade63712bd323ebc5
SHA1

879f6c5366b40b5af03e33bbda8dceb8e732fbef
SHA256

065e969b66b91933b574aaa87ff82681e5e398387c38ea06a219121f82da5801
SHA512

31d2d91e699b0e3e26a181c2ff1a2cfdc8ba86c9588d6ec20f15520aba97f7e3a7f76603772802f366cca7ee6a69a03748b65c5b038a88f1ebf1943f5d00e56c
SSDEEP

12288:KtWFLiPE18a5c2XnEqB1uxNhzoS4ip6mXjRGNMGWPdqNoikqpaEzm:pLiPaRy00hzoS4ipfjLGyWoiNm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
faf2e144004ad6fade63712bd323ebc5_JaffaCakes118

Files

faf2e144004ad6fade63712bd323ebc5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 696KB - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ