Static task
static1
Behavioral task
behavioral1
Sample
37f941a84486e601a0b5421928ddd054_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
37f941a84486e601a0b5421928ddd054_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
37f941a84486e601a0b5421928ddd054_JaffaCakes118
-
Size
8KB
-
MD5
37f941a84486e601a0b5421928ddd054
-
SHA1
f1c81e5873a40aad853fed958c0461d884e8d564
-
SHA256
0c6949d99d0b47966bd2c90b97f6cc934c50bc14bb246d4e4dc2fa519e8880f4
-
SHA512
2e0344c820c87e3825112345b0fae257e516a4b42a543b6bfdb18198445fd493c1733e522227270e2cda6e2afb91f72f19fc27fcd8a3fdc01d862b19ebecf6b6
-
SSDEEP
48:OEPxch1FdSVVAdvmUf3wXjwn9JcO9V+XSLBNBUVLsvpwT:nPuLqVAJzEID98kXGsvS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37f941a84486e601a0b5421928ddd054_JaffaCakes118
Files
-
37f941a84486e601a0b5421928ddd054_JaffaCakes118.exe windows:1 windows x86 arch:x86
f9ade0aa18f660a34a4fa23392e21838
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
ExitProcess
Sections
CODE Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ