Static task
static1
Behavioral task
behavioral1
Sample
30f9e6ffb8f54202afb3efb0ca8c8803_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30f9e6ffb8f54202afb3efb0ca8c8803_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
30f9e6ffb8f54202afb3efb0ca8c8803_JaffaCakes118
-
Size
721KB
-
MD5
30f9e6ffb8f54202afb3efb0ca8c8803
-
SHA1
14af2e098e077112ecc6ba4f96f3a21bfed4287b
-
SHA256
52df3ba0fe6204bea9ddd239e2ebd32b47d1102d74641fc8ba566e91b7c65273
-
SHA512
8433f496639c4b06896947dbf8e70685fa9dcd38fe0a217487d04126912d6a9b3590503cf188fb5a9d01b3d3a8143ba7cdcb06a4c256f92fd45d14cd16ecd5dc
-
SSDEEP
12288:rn343zS7cLnZ1x+W1V0sAnLLx5PHjsGLUEHb4ivy9mBniSQKSe0CaTRz:rn36V1xP1V0Z5oiPNU1Xm0CeRz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30f9e6ffb8f54202afb3efb0ca8c8803_JaffaCakes118
Files
-
30f9e6ffb8f54202afb3efb0ca8c8803_JaffaCakes118.exe windows:5 windows x86 arch:x86
b8111320f794d9e62a7ffe5d84bed59a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualFree
VirtualAlloc
Sections
hmimys Size: - Virtual size: 776KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: 720KB - Virtual size: 724KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hmimys Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE