Static task
static1
Behavioral task
behavioral1
Sample
37900c3bfcbb0c8f9779627605cf0457_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
37900c3bfcbb0c8f9779627605cf0457_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
37900c3bfcbb0c8f9779627605cf0457_JaffaCakes118
-
Size
81KB
-
MD5
37900c3bfcbb0c8f9779627605cf0457
-
SHA1
45cfe3ea6d22e1cb1d967869f6a172466151b5b8
-
SHA256
f5abb3f13988ab198c825e0067ab4f02db0f62dcc9fa6a06d8502836115f1640
-
SHA512
386798d16e5c233c5076ae241ae19334afefc5fd9d9fadba17f123a5cc6162dafa91f0c443a09f72a6350ff9c4e31922f869529a40083a6869debdb946f69ffa
-
SSDEEP
1536:s/+Wy3r8y7+F/DiYHMwAEE+rq2ybplBp0vzmpetOlOZ+a07gtSABTCOcA95D54rV:s/FM8y6hDiYHrDk7BpyAweNBexcE5DIV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37900c3bfcbb0c8f9779627605cf0457_JaffaCakes118
Files
-
37900c3bfcbb0c8f9779627605cf0457_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.packed Size: 512B - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RLPack Size: 80KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE