Static task
static1
Behavioral task
behavioral1
Sample
37892a7480cfbc6eb852a278dfa4050e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
37892a7480cfbc6eb852a278dfa4050e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37892a7480cfbc6eb852a278dfa4050e_JaffaCakes118
-
Size
336KB
-
MD5
37892a7480cfbc6eb852a278dfa4050e
-
SHA1
31eb9bbaefe83e0e618a02c7f9ab459379a8c2ae
-
SHA256
c3a2781da8e003b3147353c3a74fc8639da543e23a8369d189757dca6572f29c
-
SHA512
5b6063d6ffd43a3e1cbd44cc7e94e46e558c6cf567f2140b4392f27ff9d7cde9d6e3f281ef7a7819be0e0ae24c207b2de399fb696dff826b565897a328d8837e
-
SSDEEP
6144:fgDt/fcX4fngaYBTq3DgqbuCxVZ6SyLiSNVyPmkZrJ7eCLUsHH2CpnzNCCE1hSxe:ytHRWM3UwTDyLHNVamkRJ75UsHHnnCv5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37892a7480cfbc6eb852a278dfa4050e_JaffaCakes118
Files
-
37892a7480cfbc6eb852a278dfa4050e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.textbss Size: - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 312KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 431B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ