Static task
static1
Behavioral task
behavioral1
Sample
436b1c26da390111c299fdf51bc76ffa_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
436b1c26da390111c299fdf51bc76ffa_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
436b1c26da390111c299fdf51bc76ffa_JaffaCakes118
-
Size
2.1MB
-
MD5
436b1c26da390111c299fdf51bc76ffa
-
SHA1
b643ab0d6f1f833cfac3340f1b5e44ead53246b6
-
SHA256
8f80e8936819e327e8b31df62fdc27cb8e5b4aecd8f951afe5976b242d72ba73
-
SHA512
d744ca6eebcd9b6ce785e7c629ce2ec394a14109343ec2e82aac0bd5fbd6d70f7ec6478aee0ef636f56b60f85ae70675472ff286a1cb93630151f1ba03dbc7bc
-
SSDEEP
768:nBcswjkisOHZzV5WHsIpyscW2+ITUxxGfG5rtPF3:UkiX5JIHcWaZG5rD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 436b1c26da390111c299fdf51bc76ffa_JaffaCakes118
Files
-
436b1c26da390111c299fdf51bc76ffa_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.data Size: 29KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE