Static task
static1
Behavioral task
behavioral1
Sample
d30171b424d8b075c47762ee38234dc5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d30171b424d8b075c47762ee38234dc5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d30171b424d8b075c47762ee38234dc5_JaffaCakes118
-
Size
11KB
-
MD5
d30171b424d8b075c47762ee38234dc5
-
SHA1
d61de84b2c59bc8d38c064ac00b875f1ebf25a63
-
SHA256
f6e487f0047a1e4dfb01c8af4235cd84b07dd701381b36b49064f959a64541d6
-
SHA512
2570d93d2bed2693f3ed9c4cac87906b7fc3c06408a40b1b2fb6dfe2656590ef2162ab4e39061c646b694fbb2f77188879a0bd516fa6faab90fb7f0f3ff2d610
-
SSDEEP
192:5Lepa8OFKS6hjLHI2w29/X4b2SYlK/c4f/GSBul3xvk46:1ehOF4Jhz9/6P/fXGNl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d30171b424d8b075c47762ee38234dc5_JaffaCakes118
Files
-
d30171b424d8b075c47762ee38234dc5_JaffaCakes118.exe windows:4 windows x86 arch:x86
5a498eee87e4d89512a84502f500181f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
Sections
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE