44b90c9c91d6bf1438ed2963420aa4df_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44b90c9c91d6bf1438ed2963420aa4df_JaffaCakes118
Size

80KB
MD5

44b90c9c91d6bf1438ed2963420aa4df
SHA1

eafba98f5814ce65df9a1ceffd61feaea7fe4cea
SHA256

e6e6ad8f98ee02aa4ad8a3f37b0455fb23bdb8deca3bcbc11fa2465a97d34872
SHA512

79f634bb2e3ebd1cc9347c0cffe49d76510c04233bb00bb718231cdaf8299df37586b115493a0aebca759a003ba9b75b069620c408fcd0969dd614036cbb2975
SSDEEP

1536:OAWAu6Tw6j/HKGlhqfPii8+UB+q4t0BBi1TT8XBWWx:3Xj/HKlaiZUn4t0BBiyB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44b90c9c91d6bf1438ed2963420aa4df_JaffaCakes118

Files

44b90c9c91d6bf1438ed2963420aa4df_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 172KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 74KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ