Static task
static1
Behavioral task
behavioral1
Sample
36a9199b7092db42531793a0f86ad932_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
36a9199b7092db42531793a0f86ad932_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36a9199b7092db42531793a0f86ad932_JaffaCakes118
-
Size
892KB
-
MD5
36a9199b7092db42531793a0f86ad932
-
SHA1
794bc19f4728545e6bd001384c314e9a542db7d9
-
SHA256
6157bf4b8708499440ade8a96d5bcb4e20ea5bc7f340ad647ac980ee5b4ff777
-
SHA512
51d95a87427cd037e781066d5ba65436fc4109127d01d3b33b623dba241f73fffaab0893fdf165e863bd13cb0d209322fb88e241611aedf375c687e1dcfbbbbc
-
SSDEEP
24576:CKR3PIgx7D5xD/2w4pXjxRnPb2Uake4iacs7m:CEwynDewYTzPb55r7m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36a9199b7092db42531793a0f86ad932_JaffaCakes118
Files
-
36a9199b7092db42531793a0f86ad932_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
anhey Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 781KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 682B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ