Static task
static1
Behavioral task
behavioral1
Sample
36743b610969d2e4918bf09193ef7ad8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
36743b610969d2e4918bf09193ef7ad8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
36743b610969d2e4918bf09193ef7ad8_JaffaCakes118
-
Size
36KB
-
MD5
36743b610969d2e4918bf09193ef7ad8
-
SHA1
9bbe528eb840ccc0a2cce2eb0c97d69742cb2507
-
SHA256
06b0f8b9a2659ddf480dcf6886138aa221d171dd61736b98e3101dddb22414ad
-
SHA512
af29e6a3ab72bcf4f40cb511504f63d00d6b2996040761dfa0eb87713862e7a0049c03391fa825795635cd47578cb0eda9b544d831213c7e86851cce92325f03
-
SSDEEP
384:jOb91SRdkWCpuI2UxTxG1/4Ii6jYQr0X9eUr+BiL0cf8ATghvILGdxi/a2juJuQM:jTReWkkSF68QieUdHlTMUaCuJu6O/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36743b610969d2e4918bf09193ef7ad8_JaffaCakes118
Files
-
36743b610969d2e4918bf09193ef7ad8_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ