Static task
static1
Behavioral task
behavioral1
Sample
2930ac97d2e973d7ace1679ad89b6798_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2930ac97d2e973d7ace1679ad89b6798_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2930ac97d2e973d7ace1679ad89b6798_JaffaCakes118
-
Size
17KB
-
MD5
2930ac97d2e973d7ace1679ad89b6798
-
SHA1
ac42801112b877248be06d57e88f14a05439f6ad
-
SHA256
1cc406ae78d821daf1f77835ef7fb082d287d31b8ee6d9f6d73353dc94bae4b4
-
SHA512
23756df7a3297076a9e8c974cf4f74e14c62ed28fc17ce59efc657e9e2f3b6af8c9539ea23300725553f53ec920f2daf8216b06bfa59244aa0a0794a1988b611
-
SSDEEP
384:FJgc47jTGbKCe+p9kMXRovI17nKSjrY7Z008EUe1R9:zgVjGawoWp4008Enz9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2930ac97d2e973d7ace1679ad89b6798_JaffaCakes118
Files
-
2930ac97d2e973d7ace1679ad89b6798_JaffaCakes118.exe windows:1 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 916KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ