Static task
static1
Behavioral task
behavioral1
Sample
37d49492bab8f7ba57c15e347a5dfdd7_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
37d49492bab8f7ba57c15e347a5dfdd7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37d49492bab8f7ba57c15e347a5dfdd7_JaffaCakes118
-
Size
151KB
-
MD5
37d49492bab8f7ba57c15e347a5dfdd7
-
SHA1
5242b1be1bea740dc144c81cf5e6de9d80fe1ccf
-
SHA256
6cf0dca5a2445fe5011758b56ef395dd95172065b46f34fb250120bb2ae73767
-
SHA512
d99ee8da0b664ff731fcb154a47f92b85b15519c702c9d30ff9e718238ee7dc6e58b1989bbd0ca9d0b5ad61fb972446329c18b6071d1d12a023b3d98c4a77580
-
SSDEEP
3072:xXT6c0Ak/ApY9Jt5DR1lX/4Q7ipYAsTxuZGHPtwfkFss:RbpY9JrLdz7VASa4Pect
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37d49492bab8f7ba57c15e347a5dfdd7_JaffaCakes118
Files
-
37d49492bab8f7ba57c15e347a5dfdd7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
jh7 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zyvaja Size: 145KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sqfl Size: 4KB - Virtual size: 575B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE