Static task
static1
Behavioral task
behavioral1
Sample
37442cb800394d93a1e8921595224812_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
37442cb800394d93a1e8921595224812_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37442cb800394d93a1e8921595224812_JaffaCakes118
-
Size
123KB
-
MD5
37442cb800394d93a1e8921595224812
-
SHA1
17fe673222138f08e0021f1ee76228bbd36741a5
-
SHA256
a2dcf23d3471685d3856c79a9cfc20a9656e26a6345c969b931eedd098c45d68
-
SHA512
7e9c8c07f37669a5db41dc043a539b74cd20d157386f802aa410bda90df55f93549b40494cc975d70f9a156e9e66c7998776f43a70286c47d9ef4db07db42189
-
SSDEEP
3072:wmqeuveCFlFv5IvuA2QPIFejJjbnHqlKtOX+snuldphys3d2N2:Yeum8lFv5iuA2QAFuTHqgs6dphB3kN2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37442cb800394d93a1e8921595224812_JaffaCakes118
Files
-
37442cb800394d93a1e8921595224812_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.jgh Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hbg Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vcb Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tre Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ