Static task
static1
Behavioral task
behavioral1
Sample
2f44b5e8d8d6d5b5760e3b6d023e6392_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2f44b5e8d8d6d5b5760e3b6d023e6392_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f44b5e8d8d6d5b5760e3b6d023e6392_JaffaCakes118
-
Size
9KB
-
MD5
2f44b5e8d8d6d5b5760e3b6d023e6392
-
SHA1
aeb74d16aeb84d20c7e0bae37b1b44085b01be4a
-
SHA256
c8b7140b44b12a38fe202808e39a5c4e3c960f2919cf45750b68e6ae64ce5620
-
SHA512
9a6ac5c316dc44ec7c75cb2e14cf9c6a582121abf6e570d63b6c949b3cd8753f670b330d25edac36f1e5cc578cd20810e3a31aa39e9aee89d0bae9a4b71b8a45
-
SSDEEP
192:Nz77oaHuegrqxKYNkVEs/2SOruIgmiMK:B7ngrqx7y1O3Qm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2f44b5e8d8d6d5b5760e3b6d023e6392_JaffaCakes118
Files
-
2f44b5e8d8d6d5b5760e3b6d023e6392_JaffaCakes118.exe windows:4 windows x86 arch:x86
dae2264e721d7c66f7fa35e864d11aba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
Sections
.Kaos2 Size: - Virtual size: 20KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Kaos12 Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE