Static task
static1
Behavioral task
behavioral1
Sample
30b1b99114fa79cb18de12fb0aaeb2d9_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30b1b99114fa79cb18de12fb0aaeb2d9_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
30b1b99114fa79cb18de12fb0aaeb2d9_JaffaCakes118
-
Size
39KB
-
MD5
30b1b99114fa79cb18de12fb0aaeb2d9
-
SHA1
0b44afb987d4a55a5ed1cfb7769ec8f96e8e8ff6
-
SHA256
157e1b8412604fb24d149927bde702245379b635bf590497a420a72e575a9618
-
SHA512
0aa8b29dcbee55a9816512c139488a294129c88f1a8945bf30c0fcc81dc419731fcb351efbb314a7352285a5475b982f41dfe90d0b568047ffe410745c803304
-
SSDEEP
768:ciXkiuL87Kb7QMQ7RhZq2N8DGl0gP80+EsaH3scWOylSS3bv:ciXao7E7Q7R75yGl0gEUzvbvS3D
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30b1b99114fa79cb18de12fb0aaeb2d9_JaffaCakes118
Files
-
30b1b99114fa79cb18de12fb0aaeb2d9_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.d Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.d2 Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ