Static task
static1
Behavioral task
behavioral1
Sample
36e4ef5be4f012c9beab64c81e1a541e_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
36e4ef5be4f012c9beab64c81e1a541e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
36e4ef5be4f012c9beab64c81e1a541e_JaffaCakes118
-
Size
60KB
-
MD5
36e4ef5be4f012c9beab64c81e1a541e
-
SHA1
e5b0018e4d5952b535f615b42b682393910b394e
-
SHA256
e114f3a1b18fef9c9550170f9cf1fa959cc06623e4fbf983a639e942964fa854
-
SHA512
332955e1471e5784bb01bede221db46a5f0c57d8997e8755f7b921b296132fb6f60994b1f8aea2a17ecc0e3dc50101052278ebc44d61e99eeb51733cc3a1262f
-
SSDEEP
768:OeOVso9ugoTgi8LDwR+yrj0APkmvGa2KTVuorgD4A3xujqFfejWm/0Ym4MBXDW43:OJiTrjlkmvkBoreF3npejBs7e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36e4ef5be4f012c9beab64c81e1a541e_JaffaCakes118
Files
-
36e4ef5be4f012c9beab64c81e1a541e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 51KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ