Static task
static1
Behavioral task
behavioral1
Sample
37f04e7ec309d8dcbdefe59d06203f73_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
37f04e7ec309d8dcbdefe59d06203f73_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37f04e7ec309d8dcbdefe59d06203f73_JaffaCakes118
-
Size
42KB
-
MD5
37f04e7ec309d8dcbdefe59d06203f73
-
SHA1
b6832c8f5c311bb725e62b99832cb962ef56e155
-
SHA256
22efcdcf66ed98ca861505e6ea33df9561437889e56eaae50870e3587ffa5df2
-
SHA512
39e5c4f03d10c1bc4a92c9de0828e6c16f23744c14055ebefabbbb659401a6480aa3aa2e811fad3a0f7feecf254345553f2ed0f2ecd2fe6b7cff92343c201911
-
SSDEEP
768:DivIorwlgtauhBKZ8AXA+J+pNpnlmnq0eI9eiF/OUBio4PE//mNf:SwKxXKZ++J+pNwqTisXXkmNf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37f04e7ec309d8dcbdefe59d06203f73_JaffaCakes118
Files
-
37f04e7ec309d8dcbdefe59d06203f73_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 38KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE