Static task
static1
Behavioral task
behavioral1
Sample
30547f28f9962d3bd999d19034601de2_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
30547f28f9962d3bd999d19034601de2_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
30547f28f9962d3bd999d19034601de2_JaffaCakes118
-
Size
13KB
-
MD5
30547f28f9962d3bd999d19034601de2
-
SHA1
5c48fc259efeea6a9f1d3bdb341e30dc0011dd55
-
SHA256
e612fbd2661ab1401582b94198d42c989caef69c12daef44a5b8a6b865deb879
-
SHA512
0517cb251553e025c6ae86ca34cd772a1f26ac1fa7703b342adaf5e3191dce81e6e66082658d27c3cb4fbcf92097fb2060c0e84a1c494cad181c99cf9af52798
-
SSDEEP
384:OChRqYUJyncJ7ygn1ic1ZdnYenoJeNeZ:JhR2JycJucl1ZnoJeMZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30547f28f9962d3bd999d19034601de2_JaffaCakes118
Files
-
30547f28f9962d3bd999d19034601de2_JaffaCakes118.exe windows:4 windows x86 arch:x86
87bed5a7cba00c7e1f4015f1bdae2183
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
Sections
.text Size: 512B - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE