Static task
static1
Behavioral task
behavioral1
Sample
36c1f96412af8c1a1ee1c65fb72ea8f9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
36c1f96412af8c1a1ee1c65fb72ea8f9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36c1f96412af8c1a1ee1c65fb72ea8f9_JaffaCakes118
-
Size
43KB
-
MD5
36c1f96412af8c1a1ee1c65fb72ea8f9
-
SHA1
ea11a32bb646e258964c83b6f21936d48d2b3495
-
SHA256
49e4e20b1decdddd07aec480d426722b839bac08bc21625443c8717315e16772
-
SHA512
d4869e75eeccbaec644fe46ca418a607e8d0e44587f8760b5b493de177c3bf9438a47292614779bca7b1832d23f6381d5e5fcb93c47133c8bf3184fd8f0df973
-
SSDEEP
768:6wk6Ccri++/sh4pNNRREr3PjYYkPPjcUM3biVOZELBF5BShtUlkgJbGUkw18q:6wni++/Bq5kPPj3MWVOZELBF5BIulikJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36c1f96412af8c1a1ee1c65fb72ea8f9_JaffaCakes118
Files
-
36c1f96412af8c1a1ee1c65fb72ea8f9_JaffaCakes118.exe windows:5 windows x86 arch:x86
a40a3e2f813e1c45333f1b78f328ee72
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PeekMessageA
GetWindowThreadProcessId
kernel32
SystemTimeToFileTime
Sections
.vglyh Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.por Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wvubwj Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ