Static task
static1
Behavioral task
behavioral1
Sample
30a8b13547bdd0fa2d7632583848610e_JaffaCakes118.exe
Resource
win7-20240708-en
General
-
Target
30a8b13547bdd0fa2d7632583848610e_JaffaCakes118
-
Size
60KB
-
MD5
30a8b13547bdd0fa2d7632583848610e
-
SHA1
874495784b1d2515acc4745465d71a8013bac2e9
-
SHA256
0ee706633dc71a36601d8342856a98ed8010ed15b3633456ee168b6396839cb5
-
SHA512
64eb4c5572dfb83c5af9a0869daa887f2f46b4aa6efc3826969723a8b5ba43892bfd9d134e274f848263fc2769ea629d8be2e352b30d30c50410dab90d0d7f74
-
SSDEEP
1536:HspIWYfTRkGWV0naCBrrdVstgbc3a1H+Gn:HspDYf1hlnDBYec3UH+Gn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30a8b13547bdd0fa2d7632583848610e_JaffaCakes118
Files
-
30a8b13547bdd0fa2d7632583848610e_JaffaCakes118.exe windows:4 windows x86 arch:x86
6415bb063ecce9373ec6ced1d7dbc33e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CreateFileA
TerminateProcess
WaitForSingleObjectEx
VirtualProtectEx
VirtualProtect
DeviceIoControl
VirtualProtect
CreateProcessA
VirtualProtectEx
WriteProcessMemory
GetProcAddress
LoadLibraryA
VirtualProtect
GetProfileIntA
GetFileAttributesW
CreateFileA
CreateProcessW
GetSystemTimeAsFileTime
GetStartupInfoA
VirtualProtect
SleepEx
WaitForSingleObjectEx
ReadFile
ReadProcessMemory
ReadFile
Sections
.text Size: 50KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mesia Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ