Static task
static1
Behavioral task
behavioral1
Sample
37c5e3dd0ec56cb5ed0aecf8db0923ac_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
37c5e3dd0ec56cb5ed0aecf8db0923ac_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
37c5e3dd0ec56cb5ed0aecf8db0923ac_JaffaCakes118
-
Size
2.1MB
-
MD5
37c5e3dd0ec56cb5ed0aecf8db0923ac
-
SHA1
cce8912b13ea9184df7ac7315da5124bef517f92
-
SHA256
cac39363b4e85dad5bcee79f4536d4caf8bb5c71e9b38455dd3e93ffe26b5f03
-
SHA512
fc78d8b1cb327a7879170f356f1b4a964a68dbb6919159851246cdb78c2ff23c582a548e55dd8eeb65a43ddf1af5e71cb6adf0c16bc867a72149ebe0035f14ff
-
SSDEEP
24576:11ochhNHrt/rSognbBgARICpZKFHU31PvWd4BJjBOEA+YqEaMM4pidHxecCzseYw:5rt/rUbRjKc13WwZB8+Hp4p+H0alVm4K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37c5e3dd0ec56cb5ed0aecf8db0923ac_JaffaCakes118
Files
-
37c5e3dd0ec56cb5ed0aecf8db0923ac_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
�I�b#�� Size: 2.0MB - Virtual size: 6.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
������D Size: 111KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE