Static task
static1
Behavioral task
behavioral1
Sample
37f0a558916af4ce1a83d3ad40e63616_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
37f0a558916af4ce1a83d3ad40e63616_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37f0a558916af4ce1a83d3ad40e63616_JaffaCakes118
-
Size
64KB
-
MD5
37f0a558916af4ce1a83d3ad40e63616
-
SHA1
5fbe03df6fb08131d20387af04a13fb9d4fbbadb
-
SHA256
770e9c40b93dbba26383f8c7fb32d927ea701ca35f456a6af8f391cc65fa985e
-
SHA512
f30a2b6c5dde355b65ecc3788a6e4859a2cb642ae7e70aa1a8bd5c4e3751a2a87133ab5f61bc8ce59b8d2e712586b3e1be41317a310cc31e12c0655d311af9f1
-
SSDEEP
768:hah11BRuobrMPYeN1pp5n5Kgl29kUl46AnItW/GLesXtZDDvzRs:hcPPryNXD5KgoflVAnIwgthvz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37f0a558916af4ce1a83d3ad40e63616_JaffaCakes118
Files
-
37f0a558916af4ce1a83d3ad40e63616_JaffaCakes118.exe windows:4 windows x86 arch:x86
7b22b4409a3e021f3b2c2be4099a99a9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlImageNtHeader
strcmp
RtlImageDirectoryEntryToData
_chkstk
memset
kernel32
GetTempFileNameA
GetTempPathA
GetModuleFileNameA
LoadLibraryA
MoveFileExA
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE