Static task
static1
Behavioral task
behavioral1
Sample
36f0d507cc7e1d8ffbeda2fcc2c1b211_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
36f0d507cc7e1d8ffbeda2fcc2c1b211_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
36f0d507cc7e1d8ffbeda2fcc2c1b211_JaffaCakes118
-
Size
84KB
-
MD5
36f0d507cc7e1d8ffbeda2fcc2c1b211
-
SHA1
f1fbe2f627bfb7c30a82ac10015a5495438dd16c
-
SHA256
7120ff5ccf830a0ebfa9ff781aafd0374c180d97549f3db37f7b4a9dc68cf9db
-
SHA512
caaa19ee3e0a41215f58ce0f9a2ca92f1022d8a501de2cedd5af539a21976109c2f1ce406d9644c7daa716dd95140d9944cb26ea8d0993491a941361a7be71d5
-
SSDEEP
1536:QViXSHNdP0O0K6t9laAGclKen/jFnToIfHTRzr5J1DAZumFp0zA+V/R8xJS:QV2UP10K6tien/jtTBfHTRzr5JtAZumm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36f0d507cc7e1d8ffbeda2fcc2c1b211_JaffaCakes118
Files
-
36f0d507cc7e1d8ffbeda2fcc2c1b211_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 4KB - Virtual size: 3KB
IMAGE_SCN_MEM_WRITE
Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_WRITE
Size: 3KB - Virtual size: 3KB
IMAGE_SCN_MEM_WRITE
Size: 73KB - Virtual size: 76KB
IMAGE_SCN_MEM_WRITE
Size: 267B - Virtual size: 267B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE