Static task
static1
Behavioral task
behavioral1
Sample
37480b78cd69bdfe59f62e681556c2f2_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
37480b78cd69bdfe59f62e681556c2f2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
37480b78cd69bdfe59f62e681556c2f2_JaffaCakes118
-
Size
117KB
-
MD5
37480b78cd69bdfe59f62e681556c2f2
-
SHA1
5a413c764bff5ea565cfd899aba60a4765f315e5
-
SHA256
b1229d13843e5f23656ddb6a17d996d3aaeb248811ecbed3e85f3877931e155e
-
SHA512
50383d674e2e1cfb6bf8c673bc537a4583e40d3ba9bc5942f8cc97f4d6712cb87a78b81af2f3d08bd6bdc18e5ea8e5bb210d3083a3f68072d919af51bf41a3f8
-
SSDEEP
3072:NwJsvXm14HX3w3J4/nAyqX3cM91dgm0XqmdHp/duo:csfj33wy/nAyqX3njqjamdfD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37480b78cd69bdfe59f62e681556c2f2_JaffaCakes118
Files
-
37480b78cd69bdfe59f62e681556c2f2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 676KB - Virtual size: 1002KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ