Static task
static1
Behavioral task
behavioral1
Sample
36d19d687ddae9648e97d3c94e3ab0f4_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
36d19d687ddae9648e97d3c94e3ab0f4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36d19d687ddae9648e97d3c94e3ab0f4_JaffaCakes118
-
Size
213KB
-
MD5
36d19d687ddae9648e97d3c94e3ab0f4
-
SHA1
a064cc65bf65676def63f3d3a7e75801a792a6f6
-
SHA256
8ec4f02343163a4578fc237d18ab3887eb2f7dcaccff832d1291dd7f98e1cf70
-
SHA512
42d9d69e1da4d8fcae8f4698de9d197cc6a8a76543c627582f88a9cebefed77f4ee164c025184a0783e0f92e5df3ffb32963a213a7105eb5ccc23347a28d67b4
-
SSDEEP
6144:e4Fng6/PBui9Y6kKGH2iK91vxn+8ff7/MfZk3NQ:JPks92TU1vXnsk2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36d19d687ddae9648e97d3c94e3ab0f4_JaffaCakes118
Files
-
36d19d687ddae9648e97d3c94e3ab0f4_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
.text Size: 279KB - Virtual size: 279KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 756KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ