Static task
static1
Behavioral task
behavioral1
Sample
36e3094460066ddd248acf6184420a0a_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
36e3094460066ddd248acf6184420a0a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
36e3094460066ddd248acf6184420a0a_JaffaCakes118
-
Size
87KB
-
MD5
36e3094460066ddd248acf6184420a0a
-
SHA1
2499a39c33f2a5747857d3b0bf3c1f7fd44d00fe
-
SHA256
eadb71fc2ede2d995751228da0023cd797c6f8ec1ea18f72f253b7bd4ffc2475
-
SHA512
f1c9285153320aebf107cadb7d2d5b37142a39ef9a9bc1d1dc1f7583d9cf400cfc18f90509377d7158be9ed7d1497f2b949c5b3ffa79706dc2d97aca6622a704
-
SSDEEP
1536:2qKu/zULLbq8DQYDIv0ZlzcPfde9BysMalWovWJq0x6FybpjVrs2ryrd1vUQuq5j:2zVVlzCde7kc4bHs2qj7/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36e3094460066ddd248acf6184420a0a_JaffaCakes118
Files
-
36e3094460066ddd248acf6184420a0a_JaffaCakes118.exe windows:4 windows x86 arch:x86
d44e1236a04d1edde5465d71c913c497
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAddAtomA
LocalFree
WriteFileGather
GetQueuedCompletionStatus
BaseCleanupAppcompatCacheSupport
AllocateUserPhysicalPages
FoldStringA
ClearCommBreak
GetCPInfoExW
CreateFiberEx
ExpandEnvironmentStringsW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE