Static task
static1
Behavioral task
behavioral1
Sample
30dc55a38534fca616b0f1a2577192d7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30dc55a38534fca616b0f1a2577192d7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
30dc55a38534fca616b0f1a2577192d7_JaffaCakes118
-
Size
150KB
-
MD5
30dc55a38534fca616b0f1a2577192d7
-
SHA1
f42e3974bcd48de4ac9ec0987e17bcc09e693fec
-
SHA256
8a3aff4182cdad0ab4eef23a83314fe2ff8be60612d0b27c16d0cdaf43143026
-
SHA512
2d96cd249f6e6c758b54ec4dc3879423760c60e55e2950a23a7475944b15d24b7a2be433e514b14dab61798c2d8a95b7869367c8a97cfad6bc805da9f4487782
-
SSDEEP
3072:8/7D1VI/ol6vex+CdjExvYQE71ylKaqYKL3jbyFVMBe+amj6dFa0c:8DD1O28eoqMXE71yKjbyFVMo+7+nar
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30dc55a38534fca616b0f1a2577192d7_JaffaCakes118
Files
-
30dc55a38534fca616b0f1a2577192d7_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
NOS0 Size: - Virtual size: 204KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
NOS1 Size: 146KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE