Static task
static1
Behavioral task
behavioral1
Sample
30715af8108c8fae26a7be171abf8757_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30715af8108c8fae26a7be171abf8757_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
30715af8108c8fae26a7be171abf8757_JaffaCakes118
-
Size
45KB
-
MD5
30715af8108c8fae26a7be171abf8757
-
SHA1
ac6a6f96ba89cc47265f0f6c51b5ed5fecd3c308
-
SHA256
26469619f7f3bffea5b867c9036116f309514a796ad6fcf71a3d92b81d887e43
-
SHA512
af0f8bb835b5b8030df5d39990c94ccb8d0286c8a879ce5ba657c2caf6934260d988c32e24095f9e5f72e14c076e51bd3902a83f3d3a809a9f952db4008398f4
-
SSDEEP
768:h4B3cZ1GPnNaBRUqwn5MzQHztlq6qvNjOR16eLtPSAiDnayQ9FZk2i:hUcjGPNaBRdwnU8ztlAFjgI0gPDnOk2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30715af8108c8fae26a7be171abf8757_JaffaCakes118
Files
-
30715af8108c8fae26a7be171abf8757_JaffaCakes118.exe windows:4 windows x86 arch:x86
4a5c7016f8a55183eaacea531147a4be
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlUnwind
InterlockedExchange
VirtualQuery
LoadLibraryA
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE