Static task
static1
Behavioral task
behavioral1
Sample
30fc0aa04d8f8fca9e914648a5246290_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
30fc0aa04d8f8fca9e914648a5246290_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
30fc0aa04d8f8fca9e914648a5246290_JaffaCakes118
-
Size
472KB
-
MD5
30fc0aa04d8f8fca9e914648a5246290
-
SHA1
e97fb7c466aea6074caad18331d7a38e8b3cc0bd
-
SHA256
6f0c8f8599299bf242f4ce9323d912ff03412e3d0e12eb15db50d7641f51b673
-
SHA512
ddacc605e7c816bd72fe9fb8c4bb999116e4f9ba7c0f3b6d562b50332b9c67393bb35213c7a94fc0ae155818a7a7da58e1d006bca6735b0c6ffc8e57fdfa22bc
-
SSDEEP
12288:j3TjGsjHphaedyZ7ROrsWh463jAmoyVZ2mkKtFIJcXNOYMMMMMMq:7G4hQZ7RIzANUk8tGONOYMMMMMMq
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 30fc0aa04d8f8fca9e914648a5246290_JaffaCakes118
Files
-
30fc0aa04d8f8fca9e914648a5246290_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 403KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE