Static task
static1
Behavioral task
behavioral1
Sample
37f1b7e1a7d703a54e53d5182a94e017_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
37f1b7e1a7d703a54e53d5182a94e017_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37f1b7e1a7d703a54e53d5182a94e017_JaffaCakes118
-
Size
51KB
-
MD5
37f1b7e1a7d703a54e53d5182a94e017
-
SHA1
67e907f7c3d293ccbd491b87c27a88b0b7acd121
-
SHA256
99df18999b81b9a51efa2a05cba90329bdfe3f9cb3baf6859ebd1fd4bb0d277e
-
SHA512
ee75636c9f47fb6cb60d390db9b7e4d1a9558ce285d7f8690f6ac8e2aa6418e7f3dda3605344a724d06c40638c185d66f334f39a93cf87b00eaf541101d7927b
-
SSDEEP
1536:Xel+I6Qwjmvk2e3Kol4VP7uSOqd20PGxFKq:ICp3KomVPSLO20O/Kq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37f1b7e1a7d703a54e53d5182a94e017_JaffaCakes118
Files
-
37f1b7e1a7d703a54e53d5182a94e017_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 662KB - Virtual size: 661KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.6MB - Virtual size: 19.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ