Static task
static1
Behavioral task
behavioral1
Sample
40200958fd0060a99d79cac93e4c6a0b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
40200958fd0060a99d79cac93e4c6a0b_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40200958fd0060a99d79cac93e4c6a0b_JaffaCakes118
-
Size
378KB
-
MD5
40200958fd0060a99d79cac93e4c6a0b
-
SHA1
293ea121992e8060f6cc4bf2735b4620a9145def
-
SHA256
92e58345ae97e7e5d3d585cc76171ccc8e4aa0bab2f15d9d0346fd6e01100570
-
SHA512
b508ada58a8b6e1b9bfec6706e6224897a4e80da959c4aaa0ff2f1b8aa99d7a30e7b19c58a337165c05957914cf426a7e4b66ff7e0883497fbdb85a05dc3635b
-
SSDEEP
6144:vnqphrgSbdqx+69K5XiRUD7Eofd5Jsa+4gYHokZmuLFn+df/pwxhqMqyAdmiDKq3:BSbdoYBuO7Eofd5Ws3c8Fncf0hqHmWKK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40200958fd0060a99d79cac93e4c6a0b_JaffaCakes118
Files
-
40200958fd0060a99d79cac93e4c6a0b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
k�Y0 Size: - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
k�Y1 Size: 377KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
k�Y2 Size: - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE