_ReflectiveLoader@0
Behavioral task
behavioral1
Sample
37dcd98250f8638ffb1babee0d479295_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
37dcd98250f8638ffb1babee0d479295_JaffaCakes118
-
Size
69KB
-
MD5
37dcd98250f8638ffb1babee0d479295
-
SHA1
50be7b3507d971e2da1aa1772c1677b5eec34166
-
SHA256
c2adf15891223cbcf5ba4dd911e531f0707a785947413b157b98f4ae35cbacb1
-
SHA512
5f32ac7ec97c6368c131099b995c45c3c8b43352b469f915faf4c0cf565662c150fa2e542206bdc6eddbf94186e07dfa64f984f354abddeb85dbc593e7f25ee2
-
SSDEEP
1536:VZZZZZZZZZZZZpXzzzzzzzzzzzzV9rXounV98hbHnAmMqqU+2bbbAV2/S2Lccu:pBounVyFHjMqqDL2/Lcc
Malware Config
Signatures
-
GandCrab payload 1 IoCs
resource yara_rule sample family_gandcrab -
Gandcrab family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37dcd98250f8638ffb1babee0d479295_JaffaCakes118
Files
-
37dcd98250f8638ffb1babee0d479295_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ