Static task
static1
Behavioral task
behavioral1
Sample
30c3941790759c6e0f6006d2fa1e9716_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30c3941790759c6e0f6006d2fa1e9716_JaffaCakes118.exe
Resource
win10v2004-20240708-en
General
-
Target
30c3941790759c6e0f6006d2fa1e9716_JaffaCakes118
-
Size
21KB
-
MD5
30c3941790759c6e0f6006d2fa1e9716
-
SHA1
76a4c69cd4e91dec0e659fd3b9a262afea6f81a5
-
SHA256
7af00a3e0abcd9bf41f5e1fbd3ddb60f174e2093c5686645eff3cff7d7d7aa5e
-
SHA512
63cb640571b89d498954983f3ce2ee51b458f5e3bd6c52d36f855105fc8cc6654a7eeb113be92ffef79fef6bc491431d3a3834ea20741b7aecb1c938447c220e
-
SSDEEP
384:GlgFLWyEokEj8ZZt8NhdsU0hwzDr8zdAgHO2l6UxQAZbLoCwwZW5gFUX:GWLvEh28Ht8BDEwrsOgTwU1/oCw75gA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30c3941790759c6e0f6006d2fa1e9716_JaffaCakes118
Files
-
30c3941790759c6e0f6006d2fa1e9716_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI
Sections
.text Size: - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pe Size: 77B - Virtual size: 77B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE