Static task
static1
Behavioral task
behavioral1
Sample
30f6c2cffc9b402df638b75484057dce_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
30f6c2cffc9b402df638b75484057dce_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
30f6c2cffc9b402df638b75484057dce_JaffaCakes118
-
Size
51KB
-
MD5
30f6c2cffc9b402df638b75484057dce
-
SHA1
2648942cf94a28c1f5da1d56fa83ef0fb4048c22
-
SHA256
2eac9bfa18b637e0b04151e627eb69132d7d3322d7b1a0524e6ed6df85255bf3
-
SHA512
4b92c381c195fe42803e0c3f13b5590e50c22ef6ef4729963ca7372110b53f3c72f3802e69c73e3f7eab0347d859c8c9473471660dc413a0c6e4c34ff547ed5e
-
SSDEEP
768:sJOwnVkJdvk27vkKbUS+PBNaPS+e2/+8tOcQrgM1FYRJ828rtsoFtwZvt3G:sJbVe/kEU7D02uRCFYRJSlwu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30f6c2cffc9b402df638b75484057dce_JaffaCakes118
Files
-
30f6c2cffc9b402df638b75484057dce_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 637KB - Virtual size: 637KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19.3MB - Virtual size: 19.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ