Static task
static1
Behavioral task
behavioral1
Sample
37cb378f8d6ba5d40c53c7ba73a39746_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
37cb378f8d6ba5d40c53c7ba73a39746_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37cb378f8d6ba5d40c53c7ba73a39746_JaffaCakes118
-
Size
400KB
-
MD5
37cb378f8d6ba5d40c53c7ba73a39746
-
SHA1
2b3ce6b41810b7dbcdbb8428c9b8eba3d813c0f2
-
SHA256
d581ff95d59333451b5c2d4d719b6e196a6a54c6a6549217f786cb76a8c2905c
-
SHA512
7a75ed54c2f0c97087f51502b70e05ea32e67240f26efee4763fc646d62ce487d5f130845dff675766bd5b7943663df66d72ffd4407cbc333d9daac6c7882870
-
SSDEEP
6144:+TE2GzbPLZx7D6IRLgnX528+f0nsBacJrEjG8G9qJRd9oKY/wKkeAv3X1Kl:+T2zDL3DPLOvuQsBacREjLG/wKI1Kl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37cb378f8d6ba5d40c53c7ba73a39746_JaffaCakes118
Files
-
37cb378f8d6ba5d40c53c7ba73a39746_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.nsp0 Size: - Virtual size: 444KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp1 Size: 399KB - Virtual size: 400KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.nsp2 Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE