Static task
static1
Behavioral task
behavioral1
Sample
36496c157ab458fd2549a2bdcfa7cb80_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
36496c157ab458fd2549a2bdcfa7cb80_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36496c157ab458fd2549a2bdcfa7cb80_JaffaCakes118
-
Size
19KB
-
MD5
36496c157ab458fd2549a2bdcfa7cb80
-
SHA1
46c2f5be235b3027617114efc6f8dc1a3349aec6
-
SHA256
0c1ed65f0c8cb59132fdb16205f3cd7cc8e023a88f4ebbe9ccc3f421573cb896
-
SHA512
e31099c223538656d80445eed13aeb3c48ee08aa91ea0a014f2e2ef5b8354f8bf47c8279935759792e08d1c03a6997993ec5de58f93bf25c4163dc3726f7a4df
-
SSDEEP
384:m9W/WjoAGOuMQ2oJRyB+T4EdX8HvFZbZFrnSIREUruZzI0PLI7:/A7oSB+TbX8PFP9SIR16lhPI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36496c157ab458fd2549a2bdcfa7cb80_JaffaCakes118
Files
-
36496c157ab458fd2549a2bdcfa7cb80_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Y0 Size: - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Y1 Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Y2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE