Static task
static1
Behavioral task
behavioral1
Sample
36df500305ad8a18aec35510ca011d1c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
36df500305ad8a18aec35510ca011d1c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36df500305ad8a18aec35510ca011d1c_JaffaCakes118
-
Size
155KB
-
MD5
36df500305ad8a18aec35510ca011d1c
-
SHA1
f49fcfc89930321968903052a7a5bbe65e5a296d
-
SHA256
1a6cd15237970cf59f6139a173222c799fe9a380b3d3d2e45cd9922710b89ebf
-
SHA512
95949c94f371fef6ef630e9c5247b432e7a82445d4fe6fe9ae69980aee4484cc4c35b049b91da4a47fc3ff9842adc128af3ce51d4e00966a1750627f8b97551c
-
SSDEEP
3072:3Z2TAaGF9yKRnuyh0FGNDjeNKuhOPD2pSsRd7PIw:3Zs+F9ygLh08d8Ku64tLT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36df500305ad8a18aec35510ca011d1c_JaffaCakes118
Files
-
36df500305ad8a18aec35510ca011d1c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 542KB - Virtual size: 542KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE