Static task
static1
Behavioral task
behavioral1
Sample
30e1d82326cc30dfd3d6aaa136706bb7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
30e1d82326cc30dfd3d6aaa136706bb7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
30e1d82326cc30dfd3d6aaa136706bb7_JaffaCakes118
-
Size
171KB
-
MD5
30e1d82326cc30dfd3d6aaa136706bb7
-
SHA1
2f9a6d5f469e6f7f09c036a72d39247150b48497
-
SHA256
f5f68cd6ade181e34c7173abf70eef704d984af440eedad5ec921967b0250115
-
SHA512
821cc2ceb30affdbe6cb9282f5ad93c0537358e5a638430b7851ec1ab58ff1ed0f4176089005711e837c2030b9a1c3e99ea94d27ad13a495bc40848882af41fd
-
SSDEEP
3072:1h4Qt3zTTsFFiTJzBAabhvFCuPKKiPm1LGIG5w8NxCb06Irt:1/3QAJKabhvrPKI6bJNxCb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30e1d82326cc30dfd3d6aaa136706bb7_JaffaCakes118
Files
-
30e1d82326cc30dfd3d6aaa136706bb7_JaffaCakes118.exe windows:4 windows x86 arch:x86
d69c6479660f6fc7022a75a7d35f4ebe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
msvbvm60
__vbaVarSub
Sections
.text Size: 165KB - Virtual size: 512KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE