Static task
static1
Behavioral task
behavioral1
Sample
e84f2033721a0fbf93623a8fb4b4f062_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e84f2033721a0fbf93623a8fb4b4f062_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e84f2033721a0fbf93623a8fb4b4f062_JaffaCakes118
-
Size
702KB
-
MD5
e84f2033721a0fbf93623a8fb4b4f062
-
SHA1
ee2e2eb31e01fef68bb1d63d6de7e6189a7d0991
-
SHA256
4bcf32823fb089417367f29c8191ffb847314ddec4fd57be1d2820e979cb9bb3
-
SHA512
9cd5e2d923263aa7591d3ae2c5403196f5d30ff8abb278e256be8cde05d718fce7e275c5ed18e387b7064e3a36655e6582d55cff97b6973669ef4b1efe983462
-
SSDEEP
12288:R9MfAPMr3eAEWzmC3bteS+kzccf/UsckmCReEa0CAu4vOIiBej6QPFMP:eOw5eYzcYUswmee7uOjVPFMP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e84f2033721a0fbf93623a8fb4b4f062_JaffaCakes118
Files
-
e84f2033721a0fbf93623a8fb4b4f062_JaffaCakes118.exe windows:4 windows x86 arch:x86
dae2264e721d7c66f7fa35e864d11aba
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
Sections
.Kaos2 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Kaos12 Size: 697KB - Virtual size: 700KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ