Static task
static1
Behavioral task
behavioral1
Sample
c013b91f330547d8b4137c236ad2ecbb_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
c013b91f330547d8b4137c236ad2ecbb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c013b91f330547d8b4137c236ad2ecbb_JaffaCakes118
-
Size
16KB
-
MD5
c013b91f330547d8b4137c236ad2ecbb
-
SHA1
f758c2c6816f92d89eb725c180b6d0a5ca778cea
-
SHA256
d7157f47d99502b0d3f8ff02d9b37232410016a6d4b6b2e8e29bd09a71f6506b
-
SHA512
49f0f1bd758678738d722f7682d8948505c41e9de20cd5f25ba60be2fbbeb962dc4551be01c827a8b719779a316957b4c655f023c628c44680cdc81c07a50720
-
SSDEEP
192:Bad7bIauegrqxcbnaRJE3MuQuH8gRScu9L4:87HgrqxcjaRJ4v88j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c013b91f330547d8b4137c236ad2ecbb_JaffaCakes118
Files
-
c013b91f330547d8b4137c236ad2ecbb_JaffaCakes118.exe windows:4 windows x86 arch:x86
dae2264e721d7c66f7fa35e864d11aba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
Sections
.Kaos2 Size: - Virtual size: 28KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Kaos12 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE