Static task
static1
Behavioral task
behavioral1
Sample
30f5c15a993fa4f7918b273ea7b22eb8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
30f5c15a993fa4f7918b273ea7b22eb8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
30f5c15a993fa4f7918b273ea7b22eb8_JaffaCakes118
-
Size
27KB
-
MD5
30f5c15a993fa4f7918b273ea7b22eb8
-
SHA1
57afb61b8fddb2e17edba8e2ae07fdcb0be318e7
-
SHA256
920419e351ec80c10bdf9e7735531e46771c6d0d33e27497bdea7031c8017716
-
SHA512
2f0ae3140e58c2de37e9bf2c4312c44ee652805e5e65f979520fe2fc47ca669372899f461eb2a8158c2d7d77e782eb88b897d613f00c58f797f9fac01b5eeda5
-
SSDEEP
384:58BObszhs+4nIk699ZU0BrfjpPfHGYJN+YbWoG5AxQr6+Y9PffPzUkE:KBOMhswZUErjVmYJNtWoGqxXbPrNE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30f5c15a993fa4f7918b273ea7b22eb8_JaffaCakes118
Files
-
30f5c15a993fa4f7918b273ea7b22eb8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.popupk Size: 128B - Virtual size: 128B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE