Static task
static1
Behavioral task
behavioral1
Sample
37e0bd8b2278072c6251ef4035da06be_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
37e0bd8b2278072c6251ef4035da06be_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37e0bd8b2278072c6251ef4035da06be_JaffaCakes118
-
Size
156KB
-
MD5
37e0bd8b2278072c6251ef4035da06be
-
SHA1
165bf75d6a14ee9ca7b29bb5501d701afb236e97
-
SHA256
cc4e5e4a7ce783460185881eb87fca8834feed7c6499a46d89be4af4766ea3fb
-
SHA512
3790f001c253a59c7ea2ab278b2095c0e9ed30126074e96f72c02f493ff3ca7807964a7620fdc894a24f90618b4f43541d7a2da793d99ec5bebd10adfd490c9c
-
SSDEEP
3072:c+Jp+LkA2VH0dC7ZOUhbagLB28a9XzqveiSrNP8RP:c+IsVyUgUbNM8aMvfSrN8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37e0bd8b2278072c6251ef4035da06be_JaffaCakes118
Files
-
37e0bd8b2278072c6251ef4035da06be_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
NTR0 Size: - Virtual size: 344KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
NTR1 Size: 144KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE