Static task
static1
Behavioral task
behavioral1
Sample
30e2d967c236163bb27c2a9b6e8ce436_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
30e2d967c236163bb27c2a9b6e8ce436_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
30e2d967c236163bb27c2a9b6e8ce436_JaffaCakes118
-
Size
126KB
-
MD5
30e2d967c236163bb27c2a9b6e8ce436
-
SHA1
0b140e4b4a0743323ed7ea524621faedfd5f20bb
-
SHA256
16dc473858ed1fd7c168893d94a1f4168fb9b72b5c31cd89470035b35be66e1d
-
SHA512
f559b0dcba2b44de490501249fc9b05ba24e8f03a2e7be17f6ba422d82b790325fb66725c16305ee74439b7e5fb931ba54c0fb90e46b396f4b23f9d86505f0c0
-
SSDEEP
3072:zS30e4j7YHuCwsk8GE7meQ7noO4nWbRNUSJ6scNjjX:zi0hjcOCwh8x7JQ7noO4nUHUSNcxjX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30e2d967c236163bb27c2a9b6e8ce436_JaffaCakes118
Files
-
30e2d967c236163bb27c2a9b6e8ce436_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 121KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE