Static task
static1
Behavioral task
behavioral1
Sample
30bd094dcc8332ed2555db0fcab23218_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
30bd094dcc8332ed2555db0fcab23218_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
30bd094dcc8332ed2555db0fcab23218_JaffaCakes118
-
Size
97KB
-
MD5
30bd094dcc8332ed2555db0fcab23218
-
SHA1
278c0705cbe126cc56781b39216f0fd7d158b062
-
SHA256
a16acfac34fef3652fe84043edebd67b4398c97a75988092d530cdacc1c4aaae
-
SHA512
4c9a7731925cd94c9ff7810cb4d429563ccbb245c4746fe1423c74c527350c0a25ed06d2a777321ed62340765eec35a8ad0bde2c7b39c0715ca8ffa431b84cb7
-
SSDEEP
768:J9BcU4gb3SiEZ46BRJTzH19CzyvNl5zyf2oVkAtwkH3LQ:Jn4c31CJTzV955I2hOLQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30bd094dcc8332ed2555db0fcab23218_JaffaCakes118
Files
-
30bd094dcc8332ed2555db0fcab23218_JaffaCakes118.exe windows:4 windows x86 arch:x86
46646950e38cdd1519d35c0c539d2b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetErrorMode
ExitProcess
Sections
.text Size: 64KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE