Static task
static1
Behavioral task
behavioral1
Sample
37062e450fe8f48f1c2ccfb68f702b54_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
37062e450fe8f48f1c2ccfb68f702b54_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37062e450fe8f48f1c2ccfb68f702b54_JaffaCakes118
-
Size
11KB
-
MD5
37062e450fe8f48f1c2ccfb68f702b54
-
SHA1
e98730a4353adac2d97965eaca82f4d5f2a930db
-
SHA256
ff366a1a8bd8d0887dc2d400c262ca6eb3cd510c56188da091a473ec495df386
-
SHA512
c5ddeb55f3047dc1b81555357ecb66e7e5bc4a5c2d2bed56a0744e3d78ff5619ba1e6666e1b1cbea4ebea015e8028487ba124787e82c4032e240cdf4c6766812
-
SSDEEP
192:mkA7Y1BX14S/lMM3ghsy/1wSVotPsWLDChJuojp7jbmpFy:mvs14S/lj2/1RoxsGSMojpgc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37062e450fe8f48f1c2ccfb68f702b54_JaffaCakes118
Files
-
37062e450fe8f48f1c2ccfb68f702b54_JaffaCakes118.exe windows:4 windows x86 arch:x86
028ad07e6447616cbbfef8fe4f6c232a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeResource
SizeofResource
LockResource
LoadResource
FindResourceA
CreateThread
VirtualAlloc
HeapAlloc
GetProcessHeap
Sections
.data Size: 1024B - Virtual size: 518B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ