Static task
static1
Behavioral task
behavioral1
Sample
ced1d301ccd3f24ef8b1fecc24049637_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ced1d301ccd3f24ef8b1fecc24049637_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ced1d301ccd3f24ef8b1fecc24049637_JaffaCakes118
-
Size
383KB
-
MD5
ced1d301ccd3f24ef8b1fecc24049637
-
SHA1
bbf3cdcd671c426a8a4ecb53d5c41c2174d349d1
-
SHA256
5c01c99ba67c004afcd08b598a353e6e61b794adb50f7c7149c91c28dc2542d7
-
SHA512
59eb98a7d3ab70d993ac203b1ef69204dbfd44061a602614b727195b3a27722bd90c84c9e0d3c10034a0d23cbb50f5d6d8b606d151205dd10924325d82b6ea09
-
SSDEEP
6144:fI3998o+NehlINgI9cd+fZGu3CeLnsParbR90cr8JFkhLG/V7a7+P/vLa672+8MZ:fu2NeTEcd+fZGuSUsPabR90y8J6gd7wo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ced1d301ccd3f24ef8b1fecc24049637_JaffaCakes118
Files
-
ced1d301ccd3f24ef8b1fecc24049637_JaffaCakes118.exe windows:5 windows x86 arch:x86
dae2264e721d7c66f7fa35e864d11aba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
Sections
.Kaos2 Size: - Virtual size: 396KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Kaos12 Size: 380KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ