Static task
static1
Behavioral task
behavioral1
Sample
37b291ff248a29863457e7c5636f20ce_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
37b291ff248a29863457e7c5636f20ce_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37b291ff248a29863457e7c5636f20ce_JaffaCakes118
-
Size
84KB
-
MD5
37b291ff248a29863457e7c5636f20ce
-
SHA1
ee516e843816c7485978f53df59e2fdcb06107b5
-
SHA256
f6ed4a0bff31f904eb127779057db61986d2e02d32a6d347ad789134eb76adf9
-
SHA512
b32427126420a1b7f06b8fb3a042e902352e0afb19df3487e429fc6b3acb34a9be491436f5739acaa25efdb9c62fdc914662fc48646bcc4b802ba031310f81d1
-
SSDEEP
1536:QBXf2kitrOmJdaRtIjtaVsbThxycyPDQzzhDcIX:8XtitrOmJdaR6aK/hoTO19X
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37b291ff248a29863457e7c5636f20ce_JaffaCakes118
Files
-
37b291ff248a29863457e7c5636f20ce_JaffaCakes118.exe windows:4 windows x86 arch:x86
a98c94cab8f7d829ca01c83520f40e45
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
advapi32
RegCloseKey
Sections
code Size: 512B - Virtual size: 162B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 82KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE