Static task
static1
Behavioral task
behavioral1
Sample
36bbf4824ee163b9b167be6a5cfbbd64_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
36bbf4824ee163b9b167be6a5cfbbd64_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36bbf4824ee163b9b167be6a5cfbbd64_JaffaCakes118
-
Size
155KB
-
MD5
36bbf4824ee163b9b167be6a5cfbbd64
-
SHA1
71fa2419830dc0373cf4be765ca1e5667a9aa5a2
-
SHA256
56c03dc3aff579142a50a0c60d6807159ae31926b53421f331d68df60ef4718d
-
SHA512
74d3c39cdc5d20f8a67b470622c4c8cb6fdbaa68be644334f9724c1b28a44f37980e2911c509535710d0af74ef89f6e8a6a752a7fd1b5c408eb43b047db8d622
-
SSDEEP
3072:eO/Hugq282DBnqKJlHHaM5KNrG+qqE8D9kQPzrc77OWw8x8cT:eO58EBvV5KqqE8D99c769/cT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36bbf4824ee163b9b167be6a5cfbbd64_JaffaCakes118
Files
-
36bbf4824ee163b9b167be6a5cfbbd64_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 51KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 46KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 46KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE