Static task
static1
Behavioral task
behavioral1
Sample
36bd93854bdbb1b5619be4130ea72ab5_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
36bd93854bdbb1b5619be4130ea72ab5_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36bd93854bdbb1b5619be4130ea72ab5_JaffaCakes118
-
Size
976KB
-
MD5
36bd93854bdbb1b5619be4130ea72ab5
-
SHA1
8f906991417761844bdbb3c2243ba280f714eb07
-
SHA256
2bc47952b1088b7a60aed25955aab9e361037e74d433481e84bfcb8e55c20e95
-
SHA512
fb553998efbf1b074c4ea221fd3204ce20b29eb56a9177b28e402ba1c8b2f390159340bb5ec7b86c60528ac8547e0b9bcc3868827c49c815fe30d69c86b7a2d7
-
SSDEEP
12288:hmD4LekfaZFNStdMXJ8pIiYw4NpF11lWizUmcER8QwORXdCd5b+t+ZzKJ4r7NzVP:hm0faDSItwy3YuD0MeFN1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36bd93854bdbb1b5619be4130ea72ab5_JaffaCakes118
Files
-
36bd93854bdbb1b5619be4130ea72ab5_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 538KB - Virtual size: 538KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ