Static task
static1
Behavioral task
behavioral1
Sample
36d8a01b58af6b9a4946b00fc19845d5_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
36d8a01b58af6b9a4946b00fc19845d5_JaffaCakes118
-
Size
1012KB
-
MD5
36d8a01b58af6b9a4946b00fc19845d5
-
SHA1
858888cfbc4d89e7dcab924e25e942dec0216954
-
SHA256
2e1c75b49bf8f13b43137137079993e39632414bdf97dd6b233766a0c1117738
-
SHA512
13b4ee748089f1ef2dab5cf3b483370fe1d74189815f2b40f8c3ddc14d7b7e716b8a514d1a90f7517c2bfa36a7f4b857e9e4f6360a2a46c692cbd9782751cad6
-
SSDEEP
12288:rtomURfiPWtp57qm/Is1Cnb1CfcgOAZjKdtKPyM7x8L3uAPqBcv1JKjBtsAPOU+r:eS0ACNPyx3sq6tq8KP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36d8a01b58af6b9a4946b00fc19845d5_JaffaCakes118
Files
-
36d8a01b58af6b9a4946b00fc19845d5_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1000KB - Virtual size: 996KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ