Static task
static1
Behavioral task
behavioral1
Sample
30aaeb8695a007fa851b852c327ccb91_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30aaeb8695a007fa851b852c327ccb91_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
30aaeb8695a007fa851b852c327ccb91_JaffaCakes118
-
Size
37KB
-
MD5
30aaeb8695a007fa851b852c327ccb91
-
SHA1
e22f6323d3e22a12613b70803cd41507a5129d99
-
SHA256
7f721989b891c40c6420f0ea300db4a6e6761d6a960fcb1016881020cf881675
-
SHA512
38810a5132afc93f7a3d4a32936f9afbbeb887a94a65982ff7136ed6b760f893d2f0f0ecb369112496752ea8001d5bbca2380c354f757a2833fbbc60a1e9735f
-
SSDEEP
768:jpuxbbb93pfzxWt7QYQ8IgDidhHPjAJYvHF0lwY437avXKrnrT:j0Rbb5WRQYt9ir/2wraY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30aaeb8695a007fa851b852c327ccb91_JaffaCakes118
Files
-
30aaeb8695a007fa851b852c327ccb91_JaffaCakes118.exe windows:4 windows x86 arch:x86
879072da78b6146d76f51c669b56a5f6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalAlloc
GetTickCount
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc
GetProcessHeap
VirtualProtect
user32
ShowWindowAsync
GetLastActivePopup
RegisterClassA
GetParent
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 392B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE