SendPluginData
Static task
static1
Behavioral task
behavioral1
Sample
30fbf93ce0ba8883d60195c30cb16d3c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
30fbf93ce0ba8883d60195c30cb16d3c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
30fbf93ce0ba8883d60195c30cb16d3c_JaffaCakes118
-
Size
1.4MB
-
MD5
30fbf93ce0ba8883d60195c30cb16d3c
-
SHA1
a2eba7b4756ad772081f41270e071402a3ac4509
-
SHA256
cc9086b4bb37b8e12581db07a5c3b31c302e320169658b6a74f80c226402c495
-
SHA512
48a75e8cf76f29cb3d966e23c7467e9b4043cf39ce27b1a2ba9c86d69195bee604f9ce534cde902718af9bb416fe545e4e5f89a1e0c46ef57ab7b15772ec9b0a
-
SSDEEP
24576:6/9J22OmnIRfogWsQrJe8m2ZpsA13AINdMyfamegq1/v4U5yAZiY:PkIRQzPEX2ZpT13TFfhegqtAUT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30fbf93ce0ba8883d60195c30cb16d3c_JaffaCakes118
Files
-
30fbf93ce0ba8883d60195c30cb16d3c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Exports
Exports
Sections
Size: 42KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 308B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
yonkilan Size: 1.4MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE