Static task
static1
Behavioral task
behavioral1
Sample
30b481c20f5fc116394c14194deb38f6_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30b481c20f5fc116394c14194deb38f6_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
30b481c20f5fc116394c14194deb38f6_JaffaCakes118
-
Size
24KB
-
MD5
30b481c20f5fc116394c14194deb38f6
-
SHA1
14b8d2633704f5401ffda9f20f10eec29e5e0e42
-
SHA256
cc1f32793fb4dc21458673bb9602184419bcafec6052e5459afaa7fc794568f1
-
SHA512
07cfd644e930b94e321190f4555efd5a6f127462e68e25a02c77a9da1cb9827af626882b21271ebbeeb93bc62500277d9f25f5b98f0ebf8622e571685568b94f
-
SSDEEP
48:4YZdpABGB0d00RLNz/y22skcJoekVqXqxUAPbvsrPqY3v:ioH09dybsLJKqVEgrJ3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30b481c20f5fc116394c14194deb38f6_JaffaCakes118
Files
-
30b481c20f5fc116394c14194deb38f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE