Static task
static1
Behavioral task
behavioral1
Sample
30dc27769238ef220250747732fd564d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30dc27769238ef220250747732fd564d_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
30dc27769238ef220250747732fd564d_JaffaCakes118
-
Size
58KB
-
MD5
30dc27769238ef220250747732fd564d
-
SHA1
141918abd343e714ee9bc9b13709311a44423a07
-
SHA256
703049e427f774a26d8193fa0018f6db809ca3a2e0d43f323d2ec2a9e94b5243
-
SHA512
a5bdc6af32b3b0a8e43120d5825051df1359ef5aea48a216e818105bc869abf9e5dbb4cde8642c78a65b97ef4bc026276047d9f17351f566aecec4e9eec0e367
-
SSDEEP
1536:5XIyRZaZ1MRYKyEU/5TcHzgXkbrxORCZQ:5XIMXYK4/5QHzg0boRCa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30dc27769238ef220250747732fd564d_JaffaCakes118
Files
-
30dc27769238ef220250747732fd564d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Code0 Size: - Virtual size: 172KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Code1 Size: 57KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE