Static task
static1
Behavioral task
behavioral1
Sample
30e7147bbb8161848c5ea9d147e30171_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
30e7147bbb8161848c5ea9d147e30171_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
30e7147bbb8161848c5ea9d147e30171_JaffaCakes118
-
Size
463KB
-
MD5
30e7147bbb8161848c5ea9d147e30171
-
SHA1
680815cd74fa96450941e1219e6bbd41a71e15b6
-
SHA256
e36c663c216376cf8996788d5098e3c197ba48727bb0906bb0da7bfaf622cae0
-
SHA512
a772c1eacef9e5c96816d5aeb13857ea12cf2b5dd761fb34595264c3a1f4add2ae862e2654a383e410c7d0e397482f3094d8e6d5f6bf7d4ba0b779a3b772fccd
-
SSDEEP
12288:KCWutmIXRZEd+gxL3NLHt7/6URociRxwKnkycoEE3rt4U:KlutFXRZEsg3N1Qxwcky554U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30e7147bbb8161848c5ea9d147e30171_JaffaCakes118
Files
-
30e7147bbb8161848c5ea9d147e30171_JaffaCakes118.exe windows:4 windows x86 arch:x86
98c88d882f01a3f6ac1e5f7dfd761624
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxA
Sections
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 41KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE