Static task
static1
Behavioral task
behavioral1
Sample
37ba1ec3f129c01795b14e5bf9a7ef96_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
37ba1ec3f129c01795b14e5bf9a7ef96_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
37ba1ec3f129c01795b14e5bf9a7ef96_JaffaCakes118
-
Size
72KB
-
MD5
37ba1ec3f129c01795b14e5bf9a7ef96
-
SHA1
da350a2cce31021dd8acabbe6540a3e5833c6320
-
SHA256
e07e65e554ef7ff90dc971961084f1d5db563db8c268eb2e87c7a1de1f03f754
-
SHA512
43459f29c200817300f98846d5507a6575c2d58959d8261cbc9d7f50e2252604dff3da338398c8f6be4a01cb04377e60a7f6c333986e0eb1f269c20158dcc3c4
-
SSDEEP
1536:fWWjJnQnq6KNm1S0Xb9RMf1zwQVgvOWUG9p:fJJnQnEY1S0M1zwLvObGL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37ba1ec3f129c01795b14e5bf9a7ef96_JaffaCakes118
Files
-
37ba1ec3f129c01795b14e5bf9a7ef96_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE