GetEBKM
Static task
static1
Behavioral task
behavioral1
Sample
036acb2e0aaad9f3565262679cf4b5fc_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
036acb2e0aaad9f3565262679cf4b5fc_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
036acb2e0aaad9f3565262679cf4b5fc_JaffaCakes118
-
Size
1.7MB
-
MD5
036acb2e0aaad9f3565262679cf4b5fc
-
SHA1
1d856ea3eeb8bc0732f1a2f3bcc813b837612441
-
SHA256
a86c30740d5a9ac96557b9c0350d1294d5df930ede11df90f88290867460ce3c
-
SHA512
4428d6f825c1d78b01c2b86144636b0ef8b51f49f3538f4235f1847c4b877c668a0fb34c60135114aacc802811ed93f3a03686c27efde3040a8bcbc3e15caaca
-
SSDEEP
24576:iVpkQbUVSiFewkwhRQsCzzSc/Y70kpxnr6gaA6QBp7F2UwgAxrtLRD8DgdPMq5VE:ik0UjkyKzUBnEA/5pALPJ9t7gx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 036acb2e0aaad9f3565262679cf4b5fc_JaffaCakes118
Files
-
036acb2e0aaad9f3565262679cf4b5fc_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
.text Size: 410KB - Virtual size: 410KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ