Static task
static1
Behavioral task
behavioral1
Sample
30fa0863a0884df88f2ddaadfe2dda56_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
30fa0863a0884df88f2ddaadfe2dda56_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
30fa0863a0884df88f2ddaadfe2dda56_JaffaCakes118
-
Size
29KB
-
MD5
30fa0863a0884df88f2ddaadfe2dda56
-
SHA1
233686f4f651ad0e1d2160c3e0a8986e6f3d2002
-
SHA256
fa3761d1c70b38e1bdc2d1cae2445536f7d04acfd3645fcbe1d2c322dc1a9547
-
SHA512
08bc09366533187c95ad5560457069ef7fba485082eae98687ed0806c71a542b269d1e1aac69840507003c216424574111336672ab3aac3a68797e2bd603bdbb
-
SSDEEP
768:geLMhlzjRKiQWgdgmWhtaHxNZbR3Xe9lZ3FX:1AzjRpngfsaHv3eJ1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30fa0863a0884df88f2ddaadfe2dda56_JaffaCakes118
Files
-
30fa0863a0884df88f2ddaadfe2dda56_JaffaCakes118.exe windows:4 windows x86 arch:x86
c6bb0de3943eb1bd41df2be358de09c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
Sections
.text Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 927B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ