Static task
static1
Behavioral task
behavioral1
Sample
536e449703c658e1d62e7257c06a3d3d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
536e449703c658e1d62e7257c06a3d3d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
536e449703c658e1d62e7257c06a3d3d_JaffaCakes118
-
Size
136KB
-
MD5
536e449703c658e1d62e7257c06a3d3d
-
SHA1
d3c022f9ccc3dc97b3737d1cfcdd210064c11ecd
-
SHA256
58c5a8e1c1c73c4fc6e69364cb650d246a4ed27af76aa3e0fa46aed52f4c131d
-
SHA512
c000de968e6021a141fa02f33b6fc0343af9e8794f68ccca289f924a5bb9d6257104e8dd6e6c00cd7071b92b6fe209b958cd31f3c4eaefdc817856c477255e62
-
SSDEEP
3072:rG6HBXXCvV50I3QrzSrB7lDQ/moeLHxf4vy0BednTBfJly6//OtB:FHJXCEI6SjyeLHqvzednTBhly6/2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 536e449703c658e1d62e7257c06a3d3d_JaffaCakes118
Files
-
536e449703c658e1d62e7257c06a3d3d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ