Static task
static1
Behavioral task
behavioral1
Sample
30637e6f4e093d242c68cb5f97e3f724_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30637e6f4e093d242c68cb5f97e3f724_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
30637e6f4e093d242c68cb5f97e3f724_JaffaCakes118
-
Size
11KB
-
MD5
30637e6f4e093d242c68cb5f97e3f724
-
SHA1
6bddb4469f019393240103433962e77b898a9e48
-
SHA256
4dfecde75c732bfccc1b58a9d9fc1fcd5de0aa41d6d5728175d30b3a6fd71dd9
-
SHA512
1fffcb2f621207e2170ef7e5d83c25198d25a1a40e3d92ca813e7ec87ecb7bdb51d75835be497a5bf32bec5529ce4b6baa3afc0c01a2f518f357c81bf5a80a3b
-
SSDEEP
192:BKstA/Tq8+FiR9jlh4VXc63rO9SWOIg//AlXxGNNDtrTTziWHRRCdXL9jjR5c:BKRTq8+slh4By9dOL//KuviArcp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30637e6f4e093d242c68cb5f97e3f724_JaffaCakes118
Files
-
30637e6f4e093d242c68cb5f97e3f724_JaffaCakes118.exe windows:5 windows x86 arch:x86
aa6bad5b0bfecf9f9c8257e864d67fb7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
Sections
憙�jm�� Size: - Virtual size: 816B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
+�;��� Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
�Wwh$i Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ