Static task
static1
Behavioral task
behavioral1
Sample
40b211b937eb9a05e866efc0c4fca60a_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
40b211b937eb9a05e866efc0c4fca60a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40b211b937eb9a05e866efc0c4fca60a_JaffaCakes118
-
Size
78KB
-
MD5
40b211b937eb9a05e866efc0c4fca60a
-
SHA1
88a1176cec3e8c63c5a42a19b1250b4acc3b2aba
-
SHA256
d4269f813157e4899b99748bdccf03483fadf521854cf6fb74d1efa953f4992b
-
SHA512
8d349d767c9d2623b5a9c61f5cc10de64d0cf1eb0f385c5a7259bd8149fdd60396a1008a40a79c20e916d64bdcca95ef5e89ffdea702baba31cb583fa91e4b88
-
SSDEEP
1536:D0PVDFMYrRkKXk7GkEnStmO5poDS/p/Q+Dh12l+9lid:YPFCYGsSGSd5pOQXhIlulid
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40b211b937eb9a05e866efc0c4fca60a_JaffaCakes118
Files
-
40b211b937eb9a05e866efc0c4fca60a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ