Static task
static1
Behavioral task
behavioral1
Sample
36cfa7eeb8e3e3116fc6a932f050bfc2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
36cfa7eeb8e3e3116fc6a932f050bfc2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
36cfa7eeb8e3e3116fc6a932f050bfc2_JaffaCakes118
-
Size
214KB
-
MD5
36cfa7eeb8e3e3116fc6a932f050bfc2
-
SHA1
0dad3c31e0098f8fa54f414fd67fe63cdb1aac5f
-
SHA256
b8e435e0112d512f6fa0434a81fd1447b48788146c6cf9eb769ded3eac6c31d5
-
SHA512
ac2ec4f5f7e8eb3f5a4e86fcb3dd5c71881d00aef28fdc236ab2d6ae58abf4d039f1fe486202c63f33770c0467a4971860338e16017936745a64056787ec28f7
-
SSDEEP
3072:7FxwBfs65r65j93/0d3dv3xqypdkkh1LiegMa1J9/IJp4O7VJGbx+s9f+zAAmTTj:EZrG5/k3dv3xO3ev44GbKcP0oSl2v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 36cfa7eeb8e3e3116fc6a932f050bfc2_JaffaCakes118
Files
-
36cfa7eeb8e3e3116fc6a932f050bfc2_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 214KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE