Static task
static1
Behavioral task
behavioral1
Sample
30afefbf09ca7965630cd8b494cbd65c_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30afefbf09ca7965630cd8b494cbd65c_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
30afefbf09ca7965630cd8b494cbd65c_JaffaCakes118
-
Size
13KB
-
MD5
30afefbf09ca7965630cd8b494cbd65c
-
SHA1
010e22d5bd6558fcd405ef4cb0f006be2a92a5b0
-
SHA256
2f20e9358db133d6ca53af464307026102b0bb1f858a8604e9fe235cf15672e6
-
SHA512
9f59ec248e1e154567a9dd7ebbac1977d4182b1e3025f8bc97f48b27c8a4c8bc8270073a3bb4eaf6340f54193ff7a04fbb10caca7bb02dc4f8620a42feb39427
-
SSDEEP
192:oibK8nFjwF23YcrxuDifXPS8EaKg81skoHjajZAkeJcfS0AsNoE3kLVhe9sa48:oi+u1wUf1hq1s0DfS0AsNF0La
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30afefbf09ca7965630cd8b494cbd65c_JaffaCakes118
Files
-
30afefbf09ca7965630cd8b494cbd65c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 662KB - Virtual size: 661KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 181KB - Virtual size: 181KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.6MB - Virtual size: 19.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ