Static task
static1
Behavioral task
behavioral1
Sample
036bebfa65c4191e0f57ef2b0288a5e0_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
036bebfa65c4191e0f57ef2b0288a5e0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
036bebfa65c4191e0f57ef2b0288a5e0_JaffaCakes118
-
Size
221KB
-
MD5
036bebfa65c4191e0f57ef2b0288a5e0
-
SHA1
9528b635309a150b9fbd2ef2f0b33e24b56aad58
-
SHA256
53976e43ec4a6fe053bea81ad18be5a685fd1207fa678e28daf878729b91ff22
-
SHA512
6870b968fe51bb0ec1538b9360b69faa1f6c84500b94fc516cc6907e44516f61fe1e2e48928251d6219e621d31c6aba7de96a5a475830e9580daa0436680d1f4
-
SSDEEP
3072:UC2QY/1x+kVUMrr5fbG9IJk1hwckuY+70oXRx4VwDXHAxoKRMyi+uZDEp:ve1Ikbr5i38ViHJUbuZo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 036bebfa65c4191e0f57ef2b0288a5e0_JaffaCakes118
Files
-
036bebfa65c4191e0f57ef2b0288a5e0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 48KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ