Static task
static1
Behavioral task
behavioral1
Sample
236d8c6ddb5c187eba33d70e46a70f47_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
236d8c6ddb5c187eba33d70e46a70f47_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
236d8c6ddb5c187eba33d70e46a70f47_JaffaCakes118
-
Size
53KB
-
MD5
236d8c6ddb5c187eba33d70e46a70f47
-
SHA1
b3f6a463bd04319f7fc58d910e90fd4a5c266bbb
-
SHA256
1cd6f525bdaefe53f0b9a0768cbe8dbdb34064dfa511d38ff459ac5f3ebf4d92
-
SHA512
e91f48da59d0f317793f844d782d31c11df0cbe0f92ec5aea951417f5b3135389c3725fefc5f31b9362e1edf813ffa15da3758f079d2abd43619de0a9a406bdf
-
SSDEEP
192:l4nTtZu9o1wP9g/Gg8QzDF4892U++05i+CcwnJzgVnbroC/HQL+HE:OnT+oq9gXpe8UPU+4Mfn/6+k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 236d8c6ddb5c187eba33d70e46a70f47_JaffaCakes118
Files
-
236d8c6ddb5c187eba33d70e46a70f47_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.code Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 998B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.r"rc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ