Static task
static1
Behavioral task
behavioral1
Sample
30b560732ad0d567ee54566cacf083a5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
30b560732ad0d567ee54566cacf083a5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
30b560732ad0d567ee54566cacf083a5_JaffaCakes118
-
Size
1KB
-
MD5
30b560732ad0d567ee54566cacf083a5
-
SHA1
e796388cb61ac0aebac702a5201ed4ddf8f73f85
-
SHA256
a575e624a89dfe50db2105cd695072c8298aff71e55549c0605b0c1c872bc471
-
SHA512
cfdeeda08241afd06bb40fe21691dd5215f955529db9857b3cf505b41a3ead990f32110a952cf04eaa687e837140b69a2042b2d87eb0379d93b8ca806928db08
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30b560732ad0d567ee54566cacf083a5_JaffaCakes118
Files
-
30b560732ad0d567ee54566cacf083a5_JaffaCakes118.exe windows:1 windows x86 arch:x86
e9f2d91a1cd7071aeafcefffe9cc4c9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
ExitProcess
ws2_32
WSASocketA
WSAStartup
accept
bind
listen
send
Sections
shell Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE