Static task
static1
Behavioral task
behavioral1
Sample
30cb18db0e59266dd026a0c887d47dca_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
30cb18db0e59266dd026a0c887d47dca_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
30cb18db0e59266dd026a0c887d47dca_JaffaCakes118
-
Size
28KB
-
MD5
30cb18db0e59266dd026a0c887d47dca
-
SHA1
0ae556732307dd9614463d03562e9b2cbf9fc83c
-
SHA256
5d55f8bb91c6dba250b9197a374afa3c9e6c00868827b682c00a347c06e82319
-
SHA512
1d49e41d75242bf415fd3cca9fa7c0c2bbbd9e083d1af3a09fc27e6c602c47fa1a8a6acde0d41ba51d8e04c220913bac2f780c0ec4c0647ba89cb64f6120f55c
-
SSDEEP
384:DmbcQ0WjI6ne8mGo1E3fs8+IBwb3EKxVvygO9Wq6cEQvNAmVd+LJy51soq//M:DmbcQ0g+pks8+I6bTKw9cCyMJyvsd/0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30cb18db0e59266dd026a0c887d47dca_JaffaCakes118
Files
-
30cb18db0e59266dd026a0c887d47dca_JaffaCakes118.exe windows:4 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 18KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE