Static task
static1
Behavioral task
behavioral1
Sample
30e54a97428bc09a3e511b1836e49c98_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
30e54a97428bc09a3e511b1836e49c98_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
30e54a97428bc09a3e511b1836e49c98_JaffaCakes118
-
Size
536KB
-
MD5
30e54a97428bc09a3e511b1836e49c98
-
SHA1
090a4de68ebdad4c2d2e0fd4f961a916e85877ea
-
SHA256
b7a0621ba3855a2a79e8f2948ab788848783f6d2f4dd83a418dda7a5eef4d4b8
-
SHA512
3319c0211455a0c4062acc0802b6b5e3bb3c8d295bbc0e6626bf1c04d43f42a653bb467949390b75ee8a0055dd4f6b6f36f4c8783b2a79c73deb4f23d33efd74
-
SSDEEP
3072:mHru4WpQ6uFjHdXG8y/3ouuppXtHOtRDfuEB:mHCYHdXDyPWp54fH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30e54a97428bc09a3e511b1836e49c98_JaffaCakes118
Files
-
30e54a97428bc09a3e511b1836e49c98_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 524KB - Virtual size: 524KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE