Static task
static1
Behavioral task
behavioral1
Sample
36aae0c0dd4d404858ab883e5217686f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
36aae0c0dd4d404858ab883e5217686f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36aae0c0dd4d404858ab883e5217686f_JaffaCakes118
-
Size
28KB
-
MD5
36aae0c0dd4d404858ab883e5217686f
-
SHA1
07da4591cb000eb158d65db05d33330621c8b859
-
SHA256
cefc098059a94cb3659d33dad1f3677385d236922008dacb2b705ce995f7679e
-
SHA512
7ceaab80b1366f51f4390adda0030258d147f6ccfe92c5a289bf6895fa359f7088894b0ada9232597bf5fb7893758da76926f82203f8416a7dd1c8044bf2951c
-
SSDEEP
768:gUvCktpgxfWa/wgU242+sO+YIICyfMtEE:gUZpglx9fO+VyUtd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36aae0c0dd4d404858ab883e5217686f_JaffaCakes118
Files
-
36aae0c0dd4d404858ab883e5217686f_JaffaCakes118.exe windows:4 windows x86 arch:x86
d0f8959e375bef0e83c1364f496839aa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord526
DllFunctionCall
ord601
__vbaExceptHandler
ord711
ord608
ord717
ProcCallEngine
ord570
ord100
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE