Static task
static1
Behavioral task
behavioral1
Sample
30b5ad6993d9f7d7e8e414a55238ca92_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
30b5ad6993d9f7d7e8e414a55238ca92_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
30b5ad6993d9f7d7e8e414a55238ca92_JaffaCakes118
-
Size
1.6MB
-
MD5
30b5ad6993d9f7d7e8e414a55238ca92
-
SHA1
c04f8e1c81a6014d9f90fd18bffdde2d4f63bbcd
-
SHA256
9e8dc2bd9848388aceabffbc8d14cabbcefe4d0979f019b528c85afe2928d0bd
-
SHA512
a5e7da7aa07ef391f2420b1a570b91c677735c3cbe4105210f5e16757f1f52235673e8e6e7d5284017c63b78ab77c62c5a405bf251d36630ded8860eab98293f
-
SSDEEP
24576:MdlLuXwVFOFawAuzsLCAfzay1iRhBzMefREbLZwnqOwf3uAR0ODWO6570tF:agXTaxuzs1L1ivBzV+3ZYqjuPOBW0v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30b5ad6993d9f7d7e8e414a55238ca92_JaffaCakes118
Files
-
30b5ad6993d9f7d7e8e414a55238ca92_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Sections
Size: 671KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 40KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 385KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE