Static task
static1
Behavioral task
behavioral1
Sample
36e870af3ab35959920581bb2b06d543_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
36e870af3ab35959920581bb2b06d543_JaffaCakes118
-
Size
120KB
-
MD5
36e870af3ab35959920581bb2b06d543
-
SHA1
2eab1d43b896b5aa4ee1d9e71b897102f7903954
-
SHA256
7bf0da1bb351d22b3c96587bd8a625e4b59d72c0a5797019b62b37ac53805936
-
SHA512
bbfe8c6dbea0b9b0d1ece9bb61bcb268adf6510915df98b27ab5b426d2d87641166368135503814e460b4ce3ffd92a4b8902147dbdd8bcccb50e28b184b55a6d
-
SSDEEP
1536:AO7oj0TwN+8UwgqqdZll/3B5UT+BhnpBTEioX68ZFpUo8qoSAsGgUk0L0pV2NyB4:p7G0A9OhlNA+BhXEwOF+1sGnMgy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36e870af3ab35959920581bb2b06d543_JaffaCakes118
Files
-
36e870af3ab35959920581bb2b06d543_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 88KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE