Static task
static1
Behavioral task
behavioral1
Sample
0636518f31a0ea912379786060fce061_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0636518f31a0ea912379786060fce061_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0636518f31a0ea912379786060fce061_JaffaCakes118
-
Size
371KB
-
MD5
0636518f31a0ea912379786060fce061
-
SHA1
4ac43037f7a3c88fa796b0e9a205889e99e6775e
-
SHA256
ef5010c3003ac1aac7627c99e0c2bae836cdd3ebd216b3b2f809f586a91cd9a7
-
SHA512
a284781b4da9ac74d69b47420f0ceebb56d96b3bc71e4d6753bbfe305d847d8611c810b23127c86d59cb0cffac4e97c441e9af193a4e53ab65d57773be15a5b6
-
SSDEEP
6144:5XIWbbO1bB5eADRup4II40Sv0NQEZS8OQ9gTtQW9xWCV:5pbmb/eADReC40VvZS8Ofxf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0636518f31a0ea912379786060fce061_JaffaCakes118
Files
-
0636518f31a0ea912379786060fce061_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.BJFnt Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BJFnt Size: 366KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BJFnt Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE