Static task
static1
Behavioral task
behavioral1
Sample
30d19aa65f7f39fab293a4bec1b10e7c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
30d19aa65f7f39fab293a4bec1b10e7c_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
30d19aa65f7f39fab293a4bec1b10e7c_JaffaCakes118
-
Size
169KB
-
MD5
30d19aa65f7f39fab293a4bec1b10e7c
-
SHA1
1f3c7639ea348e78516ac69bc8aa598832712bc6
-
SHA256
dcb19a3373eb1b77fd0b7e98e62868fbc8ba4cb2632eca4402ff50ee804f80e4
-
SHA512
11ba3c2f647fa94bd7a57b4b2ae992bd904cc31cfe16bd75f2e531731235be5049ad3724d1f9fae84d742c17ecdf0f8223439ecc3b784f6cb88a50fc9b3b48bb
-
SSDEEP
3072:oP7aeP1Wcx+O+nf/8c9FZMRRZj92Sh8n5hIA4HuLSxRr7SD6R3l/NfU:oxvEsGFmf2485hpHLSzr7rlq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30d19aa65f7f39fab293a4bec1b10e7c_JaffaCakes118
Files
-
30d19aa65f7f39fab293a4bec1b10e7c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 76KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 100KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE