Static task
static1
Behavioral task
behavioral1
Sample
36ea7b1c79b10c526e58be3f2a4751ee_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
36ea7b1c79b10c526e58be3f2a4751ee_JaffaCakes118
-
Size
164KB
-
MD5
36ea7b1c79b10c526e58be3f2a4751ee
-
SHA1
51f76149aa0bd2a94288bb8857caf63d96f0a2d5
-
SHA256
75957587630cd069f802c2d5d9186e93fed0486b3dd1c01bf4f630286c2f5fbc
-
SHA512
c43c96beaa0f3bbf7713ce1f584e54cb787dab67aa08e930f479bf6450df93b03fc36719604e16498d6186e76a377c15b077c093586d3dac3ffe3bf1a2c0a7cc
-
SSDEEP
3072:7rBupLDVE6xErnRJrf2f6JeZvjEAvQkwUyD2xfGUXIEk5SPEX7l:RmW6UtYRIAYkNyGfGZLoU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36ea7b1c79b10c526e58be3f2a4751ee_JaffaCakes118
Files
-
36ea7b1c79b10c526e58be3f2a4751ee_JaffaCakes118.exe windows:4 windows x86 arch:x86
7ff4c0bf321014ece3e5e94e7edae5b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
FreeLibrary
EnterCriticalSection
LoadLibraryA
LeaveCriticalSection
GetProcAddress
Sections
.text Size: 163KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE