Static task
static1
Behavioral task
behavioral1
Sample
06d798549154c28be78ce9f4074585c9_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
06d798549154c28be78ce9f4074585c9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
06d798549154c28be78ce9f4074585c9_JaffaCakes118
-
Size
518KB
-
MD5
06d798549154c28be78ce9f4074585c9
-
SHA1
fdf04f3277ce3c3eced17d679948e7df7a4f756a
-
SHA256
ad9b48bb70a715e82d4a7c133101400c38c7efac78ae82738cbcaba81f6c58a9
-
SHA512
3ff86ec631987b912ee7cf6d7d3f2116553d61da2e752e5501ebeb515fa318ef776a68a47be9ac65f793332d2151a165871aa67440dec72198134e40e0c45bdb
-
SSDEEP
12288:+xFal5fCzEsRoCp95sRuk297Wv3Rr8d/Xagc67Zt9Usu3ZXcjuTq:+jaHgEpE9Iup76h8d/7c6JE3ZMjF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06d798549154c28be78ce9f4074585c9_JaffaCakes118
Files
-
06d798549154c28be78ce9f4074585c9_JaffaCakes118.exe windows:5 windows x86 arch:x86
dae2264e721d7c66f7fa35e864d11aba
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
Sections
.Kaos2 Size: - Virtual size: 500KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Kaos12 Size: 514KB - Virtual size: 516KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaohui Size: 72B - Virtual size: 72B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaohui Size: 55B - Virtual size: 55B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaohui Size: 77B - Virtual size: 77B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaohui Size: 45B - Virtual size: 45B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaohui Size: 45B - Virtual size: 45B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xiaohui Size: 40B - Virtual size: 40B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ