Static task
static1
Behavioral task
behavioral1
Sample
37c4856bb191c83209c58a344cc38911_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
37c4856bb191c83209c58a344cc38911_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37c4856bb191c83209c58a344cc38911_JaffaCakes118
-
Size
87KB
-
MD5
37c4856bb191c83209c58a344cc38911
-
SHA1
da0e7da5fd7718b0a85c1af91937c397d34db963
-
SHA256
22f63d8e08977b1fe576377ca39f2654d5b0cb4d9dc502c4587329a5b7f6f666
-
SHA512
c15f1d801246311a583051821a91b1cfaca9b1e4dabf0c8e2cd0e3c51f9218d8da4f475fc552484b4b126eb0dfedbf39c31606bd7d99b062ab58203113dc1beb
-
SSDEEP
1536:M4Iko7nf8pNlC3RwF7DRHZ6VeqAld8djS3ZTxU8fUBJzVdp1dtddO:M4XcU3lC3cD76hDdyTxazz3b7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37c4856bb191c83209c58a344cc38911_JaffaCakes118
Files
-
37c4856bb191c83209c58a344cc38911_JaffaCakes118.exe windows:4 windows x86 arch:x86
0fd4060da2826f2ef707373a70f09320
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CreateThread
GetVersion
GetCommandLineA
GetStartupInfoA
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sleep
GetACP
user32
DefWindowProcA
RegisterClassExA
CreateWindowExA
GetSystemMetrics
ShowWindow
GetDC
ReleaseDC
FindWindowA
GetMessageA
DestroyWindow
gdi32
SetPixel
Sections
PEp0 Size: 51KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ccg Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE