Static task
static1
Behavioral task
behavioral1
Sample
36772493abd2f31aa3495730e01b8c2b_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
36772493abd2f31aa3495730e01b8c2b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36772493abd2f31aa3495730e01b8c2b_JaffaCakes118
-
Size
274KB
-
MD5
36772493abd2f31aa3495730e01b8c2b
-
SHA1
6430469b133853b6272f1de21453014da846a469
-
SHA256
c061480b7dd5f17f3116014d501a1d2abf4d93f72dd886491cc8ebc3ba243a1e
-
SHA512
298992e3702ab1e0fcb6930ca3caa2b01fb5ba3a469818f7087eb2d682b0ca7a917a426755257bb4edd01cc8c428f8b1b2bb67cecb79bda41f1408c547c53018
-
SSDEEP
6144:Jd01Sf2Q7QCHkkzhPXfjcqNyFSv+OzzM6pUd7qe7bxM6ZsttMDBoB5oWpqa0r21S:g1Sf2Q7nZzhjpvzYmUdY6StUBu5ftTs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36772493abd2f31aa3495730e01b8c2b_JaffaCakes118
Files
-
36772493abd2f31aa3495730e01b8c2b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
nsp0 Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nsp1 Size: 274KB - Virtual size: 281KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE