Static task
static1
Behavioral task
behavioral1
Sample
30aaf51b0e29c2d3c12f9c5665ed9ce1_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30aaf51b0e29c2d3c12f9c5665ed9ce1_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
30aaf51b0e29c2d3c12f9c5665ed9ce1_JaffaCakes118
-
Size
157KB
-
MD5
30aaf51b0e29c2d3c12f9c5665ed9ce1
-
SHA1
50e8d1652059dff596ec6da055fd86a560b00a21
-
SHA256
d9e4b8022c133e6cc5b96ac2db49f6875cf25eef232a595f216629ff45b7c739
-
SHA512
7ad298f5b6d0c5f630af4ce474c0921aaa4de32ba525a4c6cfc9730ecf431be48eb4748d92f7d6cbe86cb041b2ae9807682159cffe7d303e271b8a1fa6dc2b58
-
SSDEEP
3072:Q32do0YFebcys61vEp5Cn/AtvJey/1Z6xMyrHP4rHhoVlF2yeqsiyyl:Q3L0Y361vESnQvJTZ6xMyDwHSVl7eqxl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30aaf51b0e29c2d3c12f9c5665ed9ce1_JaffaCakes118
Files
-
30aaf51b0e29c2d3c12f9c5665ed9ce1_JaffaCakes118.exe windows:4 windows x86 arch:x86
dae2264e721d7c66f7fa35e864d11aba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA
Sections
.naked1 Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 115KB - Virtual size: 134KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE