Static task
static1
Behavioral task
behavioral1
Sample
37981c8d306d09dbe89a20efab549d0e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
37981c8d306d09dbe89a20efab549d0e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37981c8d306d09dbe89a20efab549d0e_JaffaCakes118
-
Size
233KB
-
MD5
37981c8d306d09dbe89a20efab549d0e
-
SHA1
7871dbaa2616485ec70e3ecf382d1299e0b06b9a
-
SHA256
8792ff7d68f76a4b0c53def4dc73dbcfa743f5a3e5a584819ab9ae772cfd373c
-
SHA512
42a6287358f101d967a0a718f3729375165b26e92634c4a825f31d55df42c3e1aea66753502ee9cf033cc3067e1d94275041a09c0d8efc2a3e4e877a1aad15e2
-
SSDEEP
6144:iHudtmI6d6GBKyeWvaqvS6etwDlB3SNFICBEOz:iOdtmvd6G4jWvFv5kwGTINOz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37981c8d306d09dbe89a20efab549d0e_JaffaCakes118
Files
-
37981c8d306d09dbe89a20efab549d0e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 155KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ