Static task
static1
Behavioral task
behavioral1
Sample
34fe896c00984da34e2a1975d6a0c27d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
34fe896c00984da34e2a1975d6a0c27d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
34fe896c00984da34e2a1975d6a0c27d_JaffaCakes118
-
Size
381KB
-
MD5
34fe896c00984da34e2a1975d6a0c27d
-
SHA1
508c893c5ad16f7170b70d133fd8f366851e23e2
-
SHA256
6abdbd2bbe1ef5fa0353dca52d1e1081ffd49aaa5e4e89fb9b6495113f656cc9
-
SHA512
3de58968e01c83f9b6b577d4c397b4347f2a65ec21c2e6647114206a007aa476cc6ba1588f52d71978e42d3467a5008561f293d029eee946f50bedb9ae236fa5
-
SSDEEP
6144:2YympWchgXVwcqU2t3en4jflXrBmeUGa+6AzwBsKs7+Q86a5uebm:29mKODZecflXroehaRCwKKdQfa+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34fe896c00984da34e2a1975d6a0c27d_JaffaCakes118
Files
-
34fe896c00984da34e2a1975d6a0c27d_JaffaCakes118.exe windows:4 windows x86 arch:x86
dae2264e721d7c66f7fa35e864d11aba
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
Sections
.Kaos2 Size: - Virtual size: 772KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Kaos12 Size: 376KB - Virtual size: 380KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ