1170e3efa56f45f82c8d7ff84e6fe8d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1170e3efa56f45f82c8d7ff84e6fe8d9_JaffaCakes118
Size

591KB
MD5

1170e3efa56f45f82c8d7ff84e6fe8d9
SHA1

dedbdf4bf1df4bec1b3e7c108d6afc9bb29ca3ee
SHA256

dc750fbf92b13993d857d9854866848eb400c1ac1fa0183576c97129e920cb0e
SHA512

0fb916760f4fb202065ce182701f0172bff5e6228f741a6a5318e98974da144558d9265934d4b3197805aa215f31c4702c45ad0234e3ae59f8098cc2a9e3abbf
SSDEEP

6144:QsCzFVD/ug32ZuCFfmFDRSlMWLaNyAmjcDul1FM5aza1gZniiPLjUw7Kity+BzWU:QscvKg3w8+Lnk3KZDUwmyBLtnX0VE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1170e3efa56f45f82c8d7ff84e6fe8d9_JaffaCakes118

Files

1170e3efa56f45f82c8d7ff84e6fe8d9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 560KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 571KB - Virtual size: 572KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ