Static task
static1
Behavioral task
behavioral1
Sample
36bf8178a080b34d00c081f8f2e1365a_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
36bf8178a080b34d00c081f8f2e1365a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
36bf8178a080b34d00c081f8f2e1365a_JaffaCakes118
-
Size
712KB
-
MD5
36bf8178a080b34d00c081f8f2e1365a
-
SHA1
16199a739daa244220e03946ea8d7a282f3b1490
-
SHA256
db86573da1f2cbbb030b0d703f429992df008968cf6c9b3bd8c00d5c5ab05fec
-
SHA512
4c5033fe0dcb49fbdf3ae7f45ddce4f0f0f957a50a7b53208bde7ef391cf05eb917baa2c4a8de720c156ccbe86e9e8d1ad83edfc3a45d858bf5d2e7beada9e1c
-
SSDEEP
6144:UZfec9EbXDk6Rk8KJrG1VVE+IRuHOGrG1VVE+I+/UOPSe570Szp3oRQJ/od/UOP0:UZWtI6Rkbu9O6uKOB0ts/o2OB0H
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36bf8178a080b34d00c081f8f2e1365a_JaffaCakes118
Files
-
36bf8178a080b34d00c081f8f2e1365a_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ