Static task
static1
Behavioral task
behavioral1
Sample
36570581c9be38f29be2cbde86268beb_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
36570581c9be38f29be2cbde86268beb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36570581c9be38f29be2cbde86268beb_JaffaCakes118
-
Size
286KB
-
MD5
36570581c9be38f29be2cbde86268beb
-
SHA1
b44be7c99314ed115903be2b8c0d052e281e33f9
-
SHA256
cc6af24e843594e99eb7212d351d92b534ff1a9ea6613b7a04918f7e3b7758a9
-
SHA512
538a7a227bea4fee6c653d87e300c5a43f6c23b2188a92d5779e73749d7f67c96d1bf1113bddcf79e823e49bddab3314222cbf5e39aa2e385d7394efa29bb950
-
SSDEEP
6144:0Sxp6QMBav+8TZ+vhBjLG+avQ+66D/dKFYmNgs6j:hL6QMU28Chxy4/6DVAYy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36570581c9be38f29be2cbde86268beb_JaffaCakes118
Files
-
36570581c9be38f29be2cbde86268beb_JaffaCakes118.exe windows:4 windows x86 arch:x86
b8111320f794d9e62a7ffe5d84bed59a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualFree
VirtualAlloc
Sections
hmimys Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: 280KB - Virtual size: 284KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RPCrypt Size: 262B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.vmp0 Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 524B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ