Static task
static1
Behavioral task
behavioral1
Sample
36cd25d3161aa07385f5af22a89f4b1c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
36cd25d3161aa07385f5af22a89f4b1c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36cd25d3161aa07385f5af22a89f4b1c_JaffaCakes118
-
Size
14KB
-
MD5
36cd25d3161aa07385f5af22a89f4b1c
-
SHA1
6989eace84641c76934764de149d81a60089970d
-
SHA256
85a06380c150a8eda8c6f9bfc3c6ac8914d31b7cb01bec88a51829396a65f250
-
SHA512
1e3c7e7296198f300fd4d506db6affb4eac77a52ae5574de2a4c7646efda013cad46e2bb042f35f6ab5e24e76680676ab6c74a7f6ae4dc66a662cfd1b914e7f9
-
SSDEEP
192:AEuRboiGygZpbZckyvGOu3GieUaBtdm4S9tPpmNAefpblJPUYfVg:ruRboiGyIchGOuWkMdm4SzIAellmKy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36cd25d3161aa07385f5af22a89f4b1c_JaffaCakes118
Files
-
36cd25d3161aa07385f5af22a89f4b1c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.pkw0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pkw1 Size: 13KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pkw2 Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE