Static task
static1
Behavioral task
behavioral1
Sample
94ea2ce1040ac187338bb0ac9b72d047_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
94ea2ce1040ac187338bb0ac9b72d047_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
94ea2ce1040ac187338bb0ac9b72d047_JaffaCakes118
-
Size
12KB
-
MD5
94ea2ce1040ac187338bb0ac9b72d047
-
SHA1
1ebe125a03153ab77d2134169a4c993cee8d3865
-
SHA256
a7020a5ff1eeaa662f7d423cd046ad0be21dd5c2c6ae3feab465b4a6f71fe6ea
-
SHA512
7b435a962415d8e40ece83779e91788d4fa0291117e0487b2747ef3f8292d1d0c790836583818b6ae51f364cd95517205e6c649727f5e070182244d4eff1dba2
-
SSDEEP
192:SI7/0aSGgrqx/7v9vtA6ZnZWEqBzBpVamRWEsIO2Hb1ME/SvbsThNjW:SI7zgrqx/7v9FdCHB1pV/RWEsK7p6vQa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 94ea2ce1040ac187338bb0ac9b72d047_JaffaCakes118
Files
-
94ea2ce1040ac187338bb0ac9b72d047_JaffaCakes118.exe windows:4 windows x86 arch:x86
dae2264e721d7c66f7fa35e864d11aba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
Sections
.Kaos2 Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Kaos12 Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE