Static task
static1
Behavioral task
behavioral1
Sample
b36ff2a58617794d9185985ff6367e7f_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
b36ff2a58617794d9185985ff6367e7f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
b36ff2a58617794d9185985ff6367e7f_JaffaCakes118
-
Size
18KB
-
MD5
b36ff2a58617794d9185985ff6367e7f
-
SHA1
f86061eef44693dce8de31f588a9caf00e7b9e66
-
SHA256
ccdaa9f5058376de756a48331268d9c910d584f11441385ae6c601ab7786ebab
-
SHA512
a13c9eacf2e37c40c6897ba6f41f4f882e38ca729373fadd2a88c5dbb328b028fb168220495e22c950fcbc60a40fedc504e7ebeb06f0638e747696fba9fc98e3
-
SSDEEP
384:4k4Lzjo2rI7mbXCw/L0Tl6BPI6xDgIuSBZ0YHOpasmR7vvxlLsBBBBx:4kojo2rICCw/L0TyuIus0YuyR7DsBL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b36ff2a58617794d9185985ff6367e7f_JaffaCakes118
Files
-
b36ff2a58617794d9185985ff6367e7f_JaffaCakes118.exe windows:4 windows x86 arch:x86
409dfd4aceb56b412324fa46796a1a6a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvbvm60
ord666
Sections
.MPRESS1 Size: 13KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE