Static task
static1
Behavioral task
behavioral1
Sample
37abf281fd8a0ff5cbf9a5964250b43a_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
37abf281fd8a0ff5cbf9a5964250b43a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37abf281fd8a0ff5cbf9a5964250b43a_JaffaCakes118
-
Size
384KB
-
MD5
37abf281fd8a0ff5cbf9a5964250b43a
-
SHA1
0b4a9b4df0ff328a405488fa2b3d3e59e5db8264
-
SHA256
3c962cffa17696f213785c881d944cff88802c68b5f648eac977d2a82db5a02d
-
SHA512
f9dd578076953f41a8a1c49d204b12431180158ecd1e1769ca27da6cd6242f087a9023ab72fc485d0d75b99a9b0f98c73fa1ae9926a1ce12e00de5e88c3ac2d4
-
SSDEEP
6144:3YKM25YayPcocy+3wja9bjp8LI0buwzGuLqnfvFAo9n68r5BTTV:d1YaUR+gjkj0I0awzGumuo5xT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37abf281fd8a0ff5cbf9a5964250b43a_JaffaCakes118
Files
-
37abf281fd8a0ff5cbf9a5964250b43a_JaffaCakes118.exe windows:5 windows x86 arch:x86
dae2264e721d7c66f7fa35e864d11aba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
Sections
.Kaos2 Size: - Virtual size: 392KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Kaos12 Size: 381KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ