Static task
static1
Behavioral task
behavioral1
Sample
36a7f86c9014f1db1b0503a0090c3271_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
36a7f86c9014f1db1b0503a0090c3271_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
36a7f86c9014f1db1b0503a0090c3271_JaffaCakes118
-
Size
364KB
-
MD5
36a7f86c9014f1db1b0503a0090c3271
-
SHA1
0c1a7153913b00bda5637bbe7f7cd948b9b85cdc
-
SHA256
155b3d5f03edecb6ec843c60ae11c353101a57d844267f4162d5371314ba140c
-
SHA512
48f8f0c4e5e46c966b82a441fea613a03dd1ba8739d4d10cd60ef16238b180370eafddafae19a22eb447c9c8dc8b61dfe5b9104a86bef61637288631655a234a
-
SSDEEP
6144:Tt21Dkf/EgaQGa4TDIOxpUsgwdoW142rSX10AszAZthWne1j:0Dkf/RK7xp7bmkSX10AszAZtUM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36a7f86c9014f1db1b0503a0090c3271_JaffaCakes118
Files
-
36a7f86c9014f1db1b0503a0090c3271_JaffaCakes118.exe windows:4 windows x86 arch:x86
1743a5b9816a58c2129527a62802cc12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CreateThread
Sections
Crtj Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Dfbd Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kij Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ivcht Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.red Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rfjhv Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.raxbf Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rrtj Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hbc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aerjg Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE