Static task
static1
Behavioral task
behavioral1
Sample
36b6c45d85cd080679f977a25f19cdae_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
36b6c45d85cd080679f977a25f19cdae_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36b6c45d85cd080679f977a25f19cdae_JaffaCakes118
-
Size
122KB
-
MD5
36b6c45d85cd080679f977a25f19cdae
-
SHA1
cf03c80c4ec1388aa8b1c0a007952bf120e31a28
-
SHA256
1d85a1c9c78e62289c3d0f95c77f9e50997de5a05d61e3b2122107c519653dda
-
SHA512
32be1890e269dfa6a847753267607ab1ef7e6ab2f6a259bed6620968e031a03cb9786cb1b775af759d2bd7064d4cd5e4d7f608038d12620588e7ac416a1c42f5
-
SSDEEP
3072:G49J/CCre4U5GCCHnie9E5fwhZolF3kAXQ:G4DtUVC/Bo33kqQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36b6c45d85cd080679f977a25f19cdae_JaffaCakes118
Files
-
36b6c45d85cd080679f977a25f19cdae_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 77KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE