Static task
static1
Behavioral task
behavioral1
Sample
40569e3c7eb39810b12923d6c7d7aa86_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
40569e3c7eb39810b12923d6c7d7aa86_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40569e3c7eb39810b12923d6c7d7aa86_JaffaCakes118
-
Size
9KB
-
MD5
40569e3c7eb39810b12923d6c7d7aa86
-
SHA1
6cdfc9c68df952cee760b1631ff86d8c4b22709e
-
SHA256
656fe5c3ef94e5359f8429d5f6f9207e17c43553ed815624f1bb70ab478b55d5
-
SHA512
e2ac2d80c22b37cc8b46b67fa8407ddf3c7f0ec9aabbe14cedf5f88930b6fc8fcfe2bd7a6949d475227dae78414adc21a869d8713475067f17a14c21fccd0e97
-
SSDEEP
192:aPAohlOb6Shx5YJ9ZPChPbLE8ixJmXDBedJgcDp71XykjZl:aPAoI5+J9ctEPxJIBeMcnCCr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40569e3c7eb39810b12923d6c7d7aa86_JaffaCakes118
Files
-
40569e3c7eb39810b12923d6c7d7aa86_JaffaCakes118.exe windows:4 windows x86 arch:x86
00cc7da3785e4ec67bf07bbadf22f88c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
SetSecurityDescriptorOwner
RegNotifyChangeKeyValue
kernel32
DeleteCriticalSection
user32
GetInternalWindowPos
HiliteMenuItem
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE