Static task
static1
Behavioral task
behavioral1
Sample
30edde9f71668a62d2e37617738d17e8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
30edde9f71668a62d2e37617738d17e8_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
30edde9f71668a62d2e37617738d17e8_JaffaCakes118
-
Size
76KB
-
MD5
30edde9f71668a62d2e37617738d17e8
-
SHA1
fffecd7de14879ed97b1eac6c4bb6f9364878c7f
-
SHA256
ea0be70195e6f59a58609e8adb1035c92cf3088d5a088ba157c6adce0f23c637
-
SHA512
7d8b01fd312847d749f7209fe5a1f9d83707e3d283436e1f6cd528aeb33f13fc58831c222cf33f8204d3db6c20380a9d809370f9e65ae1a3c54ce16f7bfccd3c
-
SSDEEP
1536:vLjj5htMooZWuVthvW/xHJF2YtKM+OPotjVx+7QwV56:jjjjmooZWithKL1H8VxGDV56
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30edde9f71668a62d2e37617738d17e8_JaffaCakes118
Files
-
30edde9f71668a62d2e37617738d17e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
cb48822d4f6af1d36a44f1d7f3aa3efd
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
Sections
�� 2rV� Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
=>&�Κ�' Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ