Static task
static1
Behavioral task
behavioral1
Sample
2ff22f23aabcaf37f2182867340b8d31_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2ff22f23aabcaf37f2182867340b8d31_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2ff22f23aabcaf37f2182867340b8d31_JaffaCakes118
-
Size
264KB
-
MD5
2ff22f23aabcaf37f2182867340b8d31
-
SHA1
755311aca156b2fe461b7138fdd6c67fe6ebc656
-
SHA256
1c7e8fb63c754851b6f0af3bace7619d881437b8ccd981ad6549b2c569d9d192
-
SHA512
a97bb81850a24ce59a01bb8ac4a48d726f8f529a73018523d3957da5722fd614dfed0463c90973ed065faa5f7100f4195c98848958ca5fe809cad3a3f3503e0b
-
SSDEEP
1536:zfOwIAlBvbm40cRFHur3e2WD0Or6wiAE0u6Rp9Fllo3+z2a:zfJW4FHu7e2dOWw1uS9FlJzj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2ff22f23aabcaf37f2182867340b8d31_JaffaCakes118
Files
-
2ff22f23aabcaf37f2182867340b8d31_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.Kaos2 Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Kaos12 Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.snaker Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE