Static task
static1
Behavioral task
behavioral1
Sample
f36a035bc8e35fc2d9b9c9ffecdad73f_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f36a035bc8e35fc2d9b9c9ffecdad73f_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f36a035bc8e35fc2d9b9c9ffecdad73f_JaffaCakes118
-
Size
148KB
-
MD5
f36a035bc8e35fc2d9b9c9ffecdad73f
-
SHA1
314124f548e54bb75b175aac0682cc3421120d37
-
SHA256
de2b0abd29a4c61062c7da3e2c03f01ef2eca2a1ce52fc996c0755a5d8f0da75
-
SHA512
04c79d971bbfbdf9b33d324daea59e4c28f140c6a3193accdc3882f0f58be9fc336420f523d294628398f4d4d5692827c7f53b9e6ba62148a0c3d6af7ac7e787
-
SSDEEP
3072:DpK4G3PJcvfFkm7Fz49OvapJcRYHzw51Kf:9KRRc3am7FSOjRY8Kf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f36a035bc8e35fc2d9b9c9ffecdad73f_JaffaCakes118
Files
-
f36a035bc8e35fc2d9b9c9ffecdad73f_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE