Static task
static1
Behavioral task
behavioral1
Sample
eba01da3aee49a2042aa83f20d37313a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eba01da3aee49a2042aa83f20d37313a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eba01da3aee49a2042aa83f20d37313a_JaffaCakes118
-
Size
20KB
-
MD5
eba01da3aee49a2042aa83f20d37313a
-
SHA1
a7608818893a05bf4b6d18a9e1bc12df3d70666b
-
SHA256
088364fd10736dbb1f0a382457adec10459961d488801321bb38b8a024003ad0
-
SHA512
2c6b782faff2673f76cb9a88476e63a6c68221a0d063417e7f744f79123287ef99a5de58ba6a296d6811123b70fccd4f1d4343bf6f28051b152ddbd503fb0654
-
SSDEEP
384:z7e8grqxhiyB02O12IzeIpszZtRTAZh+Y1pH:wAh5D02IzZszZtxAZYO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eba01da3aee49a2042aa83f20d37313a_JaffaCakes118
Files
-
eba01da3aee49a2042aa83f20d37313a_JaffaCakes118.exe windows:4 windows x86 arch:x86
dae2264e721d7c66f7fa35e864d11aba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
Sections
.Kaos2 Size: - Virtual size: 36KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Kaos12 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE