Static task
static1
Behavioral task
behavioral1
Sample
37fc334b4bfa6c3bb44bb47430561faa_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
37fc334b4bfa6c3bb44bb47430561faa_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
37fc334b4bfa6c3bb44bb47430561faa_JaffaCakes118
-
Size
71KB
-
MD5
37fc334b4bfa6c3bb44bb47430561faa
-
SHA1
8badcf11fa60d4ff3114c288916131b2984d7f1e
-
SHA256
83f5e2db7e3a3ad9dbb1ab80118d6d899a477d9e78fe8ed1e56835da87355261
-
SHA512
d539c0f495fe5e8893dc61c3cc8bf32b95abd9a49f3af85400b78db2eb8f3105c8308206650aa369b186c362cd6d880a23c5fc9f8460a56fdecc3b1647f2bd0a
-
SSDEEP
768:LGokpX8FXc0tt+SWAkotdK0CNkuo/3Zf1zBmQzTGfmgyqTb1gd:LiX8FXcYt+l2W5KZf1zwQVgvT5G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37fc334b4bfa6c3bb44bb47430561faa_JaffaCakes118
Files
-
37fc334b4bfa6c3bb44bb47430561faa_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 27KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE