Static task
static1
Behavioral task
behavioral1
Sample
5c99395d14bc339495adc226530af04b_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
5c99395d14bc339495adc226530af04b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5c99395d14bc339495adc226530af04b_JaffaCakes118
-
Size
386KB
-
MD5
5c99395d14bc339495adc226530af04b
-
SHA1
49dfa36f2c999f1ed45a77a64595f777263d2500
-
SHA256
d0b89dd3280a8266cc5f1e1f663b69cbf9694f6c3fe96d8783f8c945ad678c84
-
SHA512
bf22b99cd48ab6f45c2afc01675e3e252eacba9ae870ac03a871d521514ad6fad0d54c8c932975e38a05f6181d64182c351432e8e8065b3bf670d4347ac39e6e
-
SSDEEP
6144:eLkmSePVUCrKpu7sYmtFxavsy2269xuI1RspMYnAg6Kf2Uud2HgzQ45eLBq:eWetUCmu7OAz/Uh1a63ghf1HiQx9q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5c99395d14bc339495adc226530af04b_JaffaCakes118
Files
-
5c99395d14bc339495adc226530af04b_JaffaCakes118.exe windows:4 windows x86 arch:x86
dae2264e721d7c66f7fa35e864d11aba
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
Sections
.Kaos2 Size: - Virtual size: 820KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Kaos12 Size: 381KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
aaa Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wjyl1 Size: 516B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE