Static task
static1
Behavioral task
behavioral1
Sample
30fedb0e2f71bcd933f951375d253c31_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
30fedb0e2f71bcd933f951375d253c31_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
30fedb0e2f71bcd933f951375d253c31_JaffaCakes118
-
Size
24KB
-
MD5
30fedb0e2f71bcd933f951375d253c31
-
SHA1
45d7eb8e797d8539638957131ec70901b4fa3656
-
SHA256
0fd4b032f2aa7539f7922cd8b6c9e7b7c29bd0e5f157bcc0c8bf5ed8e0dd7579
-
SHA512
7c5d4a4db740ef6ae9d7e05d223cce54dff94d1327782f387a8fe804e68a0d8e67e7c96153297809f9c3da0ea3de3d3138d50939318a62ebc81ecea27d54e265
-
SSDEEP
384:o4awOB/5c5ggT1XksW8Cg8TBxoa4CW2J6gXwXfgnhze6xCBKX:4f+gk1XFCg8T7QrpUzxCBK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30fedb0e2f71bcd933f951375d253c31_JaffaCakes118
Files
-
30fedb0e2f71bcd933f951375d253c31_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE