Static task
static1
Behavioral task
behavioral1
Sample
35210e54e5d8387365b5b5ab0fab9188_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
35210e54e5d8387365b5b5ab0fab9188_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
35210e54e5d8387365b5b5ab0fab9188_JaffaCakes118
-
Size
388KB
-
MD5
35210e54e5d8387365b5b5ab0fab9188
-
SHA1
34b6a56933721719742e7d05e9396f387ec0a1fe
-
SHA256
cf22f5ee0b1fa94137a60b7d77f3dd6cc7b5014a7db3d2aa5366f8ffef75aa65
-
SHA512
b78f164abcf84c4589c4e1d4935c5e3cd6ef33e003ee44d6d999cca19be6e334d8751d663e65977b4b11b0b4699214c8d2eff97fd08edc032cbda5a6c8b0a635
-
SSDEEP
6144:7WlHFEHyrBKH4RY7bO/45WODAniCo5lqKbsYE5MkJr/2rPl8TcvBRx:ClHTNwc45WOciCo5lsFpqbCAvBr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35210e54e5d8387365b5b5ab0fab9188_JaffaCakes118
Files
-
35210e54e5d8387365b5b5ab0fab9188_JaffaCakes118.exe windows:5 windows x86 arch:x86
dae2264e721d7c66f7fa35e864d11aba
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
Sections
.Kaos2 Size: - Virtual size: 388KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Kaos12 Size: 384KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kylin Size: 1024B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE