Static task
static1
Behavioral task
behavioral1
Sample
36975db2c06bc2e3d4f7a6abc8887b15_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
36975db2c06bc2e3d4f7a6abc8887b15_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36975db2c06bc2e3d4f7a6abc8887b15_JaffaCakes118
-
Size
3KB
-
MD5
36975db2c06bc2e3d4f7a6abc8887b15
-
SHA1
a81f35435fb307cbbde285ec2fb11b3a2c85fa7b
-
SHA256
41aa339ff9e47097b617066d195d59d5303cfe88ff06987e0b63569d75a8f2fc
-
SHA512
6f7e0678e0b8c533ce18d29480d5d4ac980d0f7a0f1f13b4fdb5472ddaa7ad191067366ae5139455e34cbcee648acd564c7e9710f46ad222f74ddcf3f091f870
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36975db2c06bc2e3d4f7a6abc8887b15_JaffaCakes118
Files
-
36975db2c06bc2e3d4f7a6abc8887b15_JaffaCakes118.exe windows:4 windows x86 arch:x86
9a22b6f3d48181e8f574f0f8c93240e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetLastError
AddAtomW
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 128B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ