Static task
static1
Behavioral task
behavioral1
Sample
30be2ffb36a483bfa2490362a2d490e5_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
30be2ffb36a483bfa2490362a2d490e5_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
30be2ffb36a483bfa2490362a2d490e5_JaffaCakes118
-
Size
24KB
-
MD5
30be2ffb36a483bfa2490362a2d490e5
-
SHA1
e3102858ed1bd6ad6ccf7deaae7721af8fffe7b0
-
SHA256
a4f0e37f955669bbc70abf547cca53eebd15f0558b700cdfe9c7f4572ba90836
-
SHA512
879829029669cd6aba4302e4ad563c03fc1a0fea12a9e3374257d87a578208a2e69af96b6c135820578585687d964f0b018f6849290e25033ef5dc91b22bf604
-
SSDEEP
384:iU1hctJnI8H2lqiPUfv+4vrhrhlZYPLPN4h5C8lJe84NSUrh:imK0uBisfRiGbzlYF99
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30be2ffb36a483bfa2490362a2d490e5_JaffaCakes118
Files
-
30be2ffb36a483bfa2490362a2d490e5_JaffaCakes118.exe windows:4 windows x86 arch:x86
14610dd0ebbc796a9a3a2ba2cdd24e79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
user32
MessageBoxW
Sections
.text Size: 512B - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE