Static task
static1
Behavioral task
behavioral1
Sample
30b2e7217719bb4f31a601efd663b409_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
30b2e7217719bb4f31a601efd663b409_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
30b2e7217719bb4f31a601efd663b409_JaffaCakes118
-
Size
223KB
-
MD5
30b2e7217719bb4f31a601efd663b409
-
SHA1
2e50c4715e0d14852e316ddee448c2c071052b60
-
SHA256
e010cfecac5beb36e67d0246faeaf7561fe87432bc1422f3937ca37cfa2b86d7
-
SHA512
b2c21f484fcd85c15d083f7f11e889d32baab366ec56a938d9f76e02461fa3e3e14697f13f453f53296149e00b8c9168d93dda956c087c97951134e3790e8563
-
SSDEEP
3072:r8GcRE6wcDH7pGepaxi53GEkuWbkdqholxQlrVMpOClskH6IeL+b4:rEE6dL7xpauvk5bkohBVMlBT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30b2e7217719bb4f31a601efd663b409_JaffaCakes118
Files
-
30b2e7217719bb4f31a601efd663b409_JaffaCakes118.exe windows:4 windows x86 arch:x86
d2d1679a9f59f36f96f5c68b8273be14
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
GetMenu
GetIconInfo
CharLowerA
DrawIcon
DrawMenuBar
DispatchMessageW
BeginPaint
GetMessagePos
EnableScrollBar
GetSubMenu
GetParent
ClientToScreen
GetScrollInfo
FillRect
kernel32
MulDiv
GetOEMCP
FindResourceA
GetACP
GetSystemDefaultLangID
GetCurrentThread
GlobalAlloc
LoadLibraryA
SetEvent
LoadLibraryExA
CloseHandle
ExitProcess
GetCurrentProcessId
GetVersionExA
CreateFileA
VirtualQuery
VirtualAlloc
lstrlenA
GetCommandLineA
Sections
CODE Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 41KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BSS Size: 1024B - Virtual size: 846B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 615B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ