Static task
static1
Behavioral task
behavioral1
Sample
37dce4eadf13da8dd73dbc5474c1fad5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
37dce4eadf13da8dd73dbc5474c1fad5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
37dce4eadf13da8dd73dbc5474c1fad5_JaffaCakes118
-
Size
385KB
-
MD5
37dce4eadf13da8dd73dbc5474c1fad5
-
SHA1
09a6c391526d6b736a0e3e2b06610ec84c1c03eb
-
SHA256
186a7fe6d31151e6bbd5a6b64e5435ce667741782dd6b15021b97aa7129f7cc4
-
SHA512
b1952055d1732f7c012c9ceb54b20ff728f873a1b81d1622fdf96fd7b9522b5a739f8f0efa52d24ba91c109a63c4298058494cf4e03ab44dc63a2084a57fc787
-
SSDEEP
6144:rumEaaDShIPeR8648vBxI6Zu/gnG3OcDjTuEhWzh7NR8UrosyelUPR8TxUR/I/6K:DhB8t6U/0GNDvuR778Uzye2ktB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37dce4eadf13da8dd73dbc5474c1fad5_JaffaCakes118
Files
-
37dce4eadf13da8dd73dbc5474c1fad5_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 352KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ