Static task
static1
Behavioral task
behavioral1
Sample
36f9ceeb11b6d2b9a3139ac4751ba07d_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
36f9ceeb11b6d2b9a3139ac4751ba07d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36f9ceeb11b6d2b9a3139ac4751ba07d_JaffaCakes118
-
Size
20KB
-
MD5
36f9ceeb11b6d2b9a3139ac4751ba07d
-
SHA1
b6aa6046c785d0baddac0c567b14fb1028de1f3e
-
SHA256
79cdb9d198bcda2bfa28d90c09a3a12e104a2271f6c8323887f394383e88c891
-
SHA512
29214732e699482d54616dbf0494ffbd128d07949a3c55c9e60ec26a1ab6452c7465f5dcd1c8baf93df4166c228b3d5f47c794c3aeb8437a4dc589af54fbd215
-
SSDEEP
384:qUWFOXYZSr+8hk2VUN6oca3KXl4qVf79OlbhHIY9gPDN++2cziMcUnodIR3YdxIb:ZECYgSdWpXa32Z79OBNIY9E2sWUnodIj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36f9ceeb11b6d2b9a3139ac4751ba07d_JaffaCakes118
Files
-
36f9ceeb11b6d2b9a3139ac4751ba07d_JaffaCakes118.exe windows:4 windows x86 arch:x86
3d98884013f55c5f50425a1d4370a928
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
ExitProcess
GetSystemDirectoryA
GetProcAddress
LoadLibraryA
FreeLibrary
WriteFile
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE