Static task
static1
Behavioral task
behavioral1
Sample
36e058d3c79451c0b544b0007f189ead_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
36e058d3c79451c0b544b0007f189ead_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36e058d3c79451c0b544b0007f189ead_JaffaCakes118
-
Size
985KB
-
MD5
36e058d3c79451c0b544b0007f189ead
-
SHA1
dab4ce07216fd5314d1aaa11caf6d056c60ec627
-
SHA256
f230a237ea2a4237c21b69cb2fbe16e1c4bddd444f6be86f3a12f825693eeaf8
-
SHA512
593f8f89f6e2cd803837ceb5a9ac6f51d00699191e2c06233be679e39bef1ef7331a29fa57fa88e0a7f137f518a390029f91acade203cc252bb748e462d6a383
-
SSDEEP
12288:UT010hYag5kCUBitGBECSsPsxt7JTzfo+zLFux/q8RewmY2LNhegZebgOcbB4VsP:Uiua5bGPsxhJ/NC/1Jmqb6B44R3S9oCy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36e058d3c79451c0b544b0007f189ead_JaffaCakes118
Files
-
36e058d3c79451c0b544b0007f189ead_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: 512B - Virtual size: 972KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.RLPack Size: 468KB - Virtual size: 485KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE