Static task
static1
Behavioral task
behavioral1
Sample
36e83e76d0d5c046f659cc2362540e79_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
36e83e76d0d5c046f659cc2362540e79_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
36e83e76d0d5c046f659cc2362540e79_JaffaCakes118
-
Size
144KB
-
MD5
36e83e76d0d5c046f659cc2362540e79
-
SHA1
31b85fd8d30f89e54a3e8cc3f71dd0270b261fc5
-
SHA256
df37ab1d41a70cc4be032820a682c5e8c7ec17962f50328ae1439ddddbed85c3
-
SHA512
dd90f76700c38717083a18465211b7d21cc2bd5dd518361ce178ef0c05c6df2e6a4e1fc0f7ecb014d5e1044efcfeb41337d5e89a9ea38fccf9c2d2860b5af9d0
-
SSDEEP
3072:QdWBjVa6+304VBiljBreLJpEqs9KlZsgpTO2NbX2IX+1a:QAj+35zylYJuqOK/P51Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36e83e76d0d5c046f659cc2362540e79_JaffaCakes118
Files
-
36e83e76d0d5c046f659cc2362540e79_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
ssdfdsfa Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
asdsfdss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
asdaffds Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
asdsadds Size: 9.0MB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
asdsfdg Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.newimp Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE