Static task
static1
Behavioral task
behavioral1
Sample
30d6e5eb832c3a0fee0e8157a0a3946d_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
30d6e5eb832c3a0fee0e8157a0a3946d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
30d6e5eb832c3a0fee0e8157a0a3946d_JaffaCakes118
-
Size
554KB
-
MD5
30d6e5eb832c3a0fee0e8157a0a3946d
-
SHA1
55917b6ea778555416dc6ba3946347299244ae9a
-
SHA256
b8fc37c5a6ed8d38ad63443b00e03c2b8a6856e06db9c01b20fcdf02b4ee57f7
-
SHA512
1fdb94a628ca854324a79c9a7b63eb4efadc6ccfaf7d0afcc882772c2a9c1a8b8060142b1b2ece1aca04f583e56a105a206ada5e0e9ed3e4d1d385ee7bc1a2ae
-
SSDEEP
6144:0BaZA6AM5tm1BS4i4jARHKhyFxQZZxbU:0cA6SbVi42BFx8dU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30d6e5eb832c3a0fee0e8157a0a3946d_JaffaCakes118
Files
-
30d6e5eb832c3a0fee0e8157a0a3946d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 205KB - Virtual size: 640KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 142KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE