Static task
static1
Behavioral task
behavioral1
Sample
30ef7e995b7055276cfbbe427efee679_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
30ef7e995b7055276cfbbe427efee679_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
30ef7e995b7055276cfbbe427efee679_JaffaCakes118
-
Size
564KB
-
MD5
30ef7e995b7055276cfbbe427efee679
-
SHA1
b02e2e33ef9572d0abe9c3f2c7774de59efe49df
-
SHA256
97e8e3bb4b9c4e36d1bb4eaeaaeaffc0aebf23b697356b26867ecf109700df2b
-
SHA512
7661390e8d8f7345be497942473b5673f7f3d776043416d6a04d262c4122f211d298e647a3560ca471778ba8eb4d165aced4daff1970cf6f1840d775ed78e530
-
SSDEEP
12288:jAx2TAojki6M9EZHiBUEsfYJ1yhg+CJ2RHPuK7UUF/n9PUfsP:jAx2soj2isfHg1gRT7U4eU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30ef7e995b7055276cfbbe427efee679_JaffaCakes118
Files
-
30ef7e995b7055276cfbbe427efee679_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.res0 Size: - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.res1 Size: 563KB - Virtual size: 564KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.res2 Size: - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE