Static task
static1
Behavioral task
behavioral1
Sample
36faa61a2fee254f206c6963504cba56_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
36faa61a2fee254f206c6963504cba56_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
36faa61a2fee254f206c6963504cba56_JaffaCakes118
-
Size
16KB
-
MD5
36faa61a2fee254f206c6963504cba56
-
SHA1
b91515cbf10a2acb39f56fe44aa22d69df4e98d0
-
SHA256
aba69cdedc5102d71928fdc5cb291dc4e12f4d99592d8d920f8033c18b071f11
-
SHA512
c35765b19c83f77777c1bda01965ae396f3f0fda6de0369a3111db71403cb0d3b571ff2357f24ee4712b5531fa022888aab40724e380b993af05c77a92481d47
-
SSDEEP
384:ZxI0QdbvkvZsuaKNijxITkuOvcywp5GNQQ16z:HQWBsuarxvuOEywpXQ16z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36faa61a2fee254f206c6963504cba56_JaffaCakes118
Files
-
36faa61a2fee254f206c6963504cba56_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdata Size: - Virtual size: 72KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 41KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE