Static task
static1
Behavioral task
behavioral1
Sample
36e3d6606d6da385a0aafe50d32b0e22_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
36e3d6606d6da385a0aafe50d32b0e22_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36e3d6606d6da385a0aafe50d32b0e22_JaffaCakes118
-
Size
97KB
-
MD5
36e3d6606d6da385a0aafe50d32b0e22
-
SHA1
82d5e44e92e2c415785327543712e0c4bba9ea79
-
SHA256
216d6c323a3e25b59d3b63015c5a3fbd3425886cf62d91f508ae8b1a5f260d77
-
SHA512
fbc619109a87c1e905ccf0f25a50ce8789e82cd8966470e147f51b8ae820726620b4a0fd8a3f2b2c1f2f81d35c3a640b3fd5c5aa7f251aacaf50756533dd5157
-
SSDEEP
1536:U9g5cmAAdm8vtxxkypOwaq1mvi85ExHW1H0xYODlM37KO07DOFR37KO07f:zbHxxk7q1S6N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36e3d6606d6da385a0aafe50d32b0e22_JaffaCakes118
Files
-
36e3d6606d6da385a0aafe50d32b0e22_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE