Static task
static1
Behavioral task
behavioral1
Sample
37a6fb03e939b4164141f0dbc63909bb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
37a6fb03e939b4164141f0dbc63909bb_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
37a6fb03e939b4164141f0dbc63909bb_JaffaCakes118
-
Size
1.2MB
-
MD5
37a6fb03e939b4164141f0dbc63909bb
-
SHA1
7618521c50978c980055ac2ec3cfa43fbaa3968c
-
SHA256
69ff3ca15ecbbff032a7a5be2780054658ba1484c70e0e415a65f1cb550f03d7
-
SHA512
f5d311396825ea7a2b22841c126b0069ac98852939def3fc0e7c26e9a4b11edb94e975b028c51ceff4aab42db80bbf8174e20e6db8386783fafc6d84237d5809
-
SSDEEP
24576:ay7hNGt1q54sSLTY6SVknKMA4EFgVjItnYmr9wo+8nef3HEt0MBKPhDHXtw4TyJ:aybY+bwnsa29e14Phz3evoxspD3vWJJC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37a6fb03e939b4164141f0dbc63909bb_JaffaCakes118
Files
-
37a6fb03e939b4164141f0dbc63909bb_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 2KB - Virtual size: 312KB
IMAGE_SCN_MEM_READ
VProtect Size: 465KB - Virtual size: 468KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 738KB - Virtual size: 936KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VProtect Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ