Static task
static1
Behavioral task
behavioral1
Sample
37057d89d36027a3316cbaf4b8ae1b0d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
37057d89d36027a3316cbaf4b8ae1b0d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37057d89d36027a3316cbaf4b8ae1b0d_JaffaCakes118
-
Size
23KB
-
MD5
37057d89d36027a3316cbaf4b8ae1b0d
-
SHA1
9e8919a3ad4fef17eb7167fc7818a25a00ace155
-
SHA256
22a4ee854ffb7321d490eec657d04d559fe8617105b260cb59f96f950a0d4df0
-
SHA512
0271a11f474ab4813ba57b72ce2709dac339d69a9ed2c33602730cf25f4e7e7c88753f2c41f56415584d8debb63977f372c9b266901366b3ed36f2ffbe0682eb
-
SSDEEP
384:/6skTDisNOPsyWw5t8Fe7k4i6rzI/ilEbCjku5vzdbqBfz2qe+I9j6c:CT9N0Iw5PdnuilnQizVqB49V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37057d89d36027a3316cbaf4b8ae1b0d_JaffaCakes118
Files
-
37057d89d36027a3316cbaf4b8ae1b0d_JaffaCakes118.exe windows:4 windows x86 arch:x86
5e58d0c080fff3efd1b29d3331696cd7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
Sections
.text Size: 19KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ