53788f0489c879a66d3f92a712858b53_JaffaCakes118 | Triage

Sharing

General

Target

53788f0489c879a66d3f92a712858b53_JaffaCakes118
Size

1.4MB
MD5

53788f0489c879a66d3f92a712858b53
SHA1

c7eb1997bf446a8264b5f7f0066df21637fbf084
SHA256

dae9f2b43f697cb3d2c57a87df27c9809a67f4dbe16a7b7f118e9872a67526b2
SHA512

aa6aa3cce878b5ebe539939d88b67f3973cb8b6853905973ca1cd6ac60a1492ed83d7410fd875b7b29971039da09c442250c997c7a3c772d09fad1a6e9f3ec2d
SSDEEP

24576:AL55lscP8r/rMAhkP0X8b4T6J/CB9OdQcp5b/LtAdaNUcIDzU4hZagOtwnzBs1bR:YscP8r/4AqP0Xw/k9OX5b/LtwaNwLUZf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53788f0489c879a66d3f92a712858b53_JaffaCakes118

Files

53788f0489c879a66d3f92a712858b53_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ