Static task
static1
Behavioral task
behavioral1
Sample
36e385cd990f5f342dddbeb584d5cd5f_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
36e385cd990f5f342dddbeb584d5cd5f_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36e385cd990f5f342dddbeb584d5cd5f_JaffaCakes118
-
Size
260KB
-
MD5
36e385cd990f5f342dddbeb584d5cd5f
-
SHA1
fd3038ecdf6f69a09a16772c3cb4058a398a195d
-
SHA256
431dd08c0f85b073524d850d60684c7c770191b7252c0377c1f323fa5416a937
-
SHA512
f69994d3b09ec7ec2baf3d277fe853b320a651d59a1c1ca5d3d04f58c451e7b41d326324950fac5db9ee3ad4ed2ce83592d2314517179a4cee14ede50239bf23
-
SSDEEP
6144:MBJw2Fy7bqKiFfIfRYd4GPsOzgu/o4WriXNVMTF7K:iyqKiFwR0J7Mp7K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36e385cd990f5f342dddbeb584d5cd5f_JaffaCakes118
Files
-
36e385cd990f5f342dddbeb584d5cd5f_JaffaCakes118.exe windows:4 windows x86 arch:x86
22deaa3e5166e3019a02358581c9a9ee
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
_lopen
ExitProcess
user32
MessageBoxA
shell32
ShellExecuteA
Sections
Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 152KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE