Static task
static1
Behavioral task
behavioral1
Sample
40b926c481e033f623a4a99fa858dced_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
40b926c481e033f623a4a99fa858dced_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
40b926c481e033f623a4a99fa858dced_JaffaCakes118
-
Size
308KB
-
MD5
40b926c481e033f623a4a99fa858dced
-
SHA1
11521833231f0957574da9d20c95c5b7c4c95308
-
SHA256
26bf25ccef3c714a0dee337e4f338e3c6b9723aa51ddfcb0ac9f1a9280cac4f4
-
SHA512
92a532998c2e888352f32cd86d1384c5bfbea9a9640003976f95d1cb4235ce06388055e9654dd81e2cca2163694175d4d9d10d4eebb6ca18450af7a2c3af7dc2
-
SSDEEP
6144:RHUucRnVvGQmUJ01yGsN1jZF6mav+lxB+1AuzPM0CkitooM9K7+:tURbsAZN1amK+8AurM0CpooM9Ky
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40b926c481e033f623a4a99fa858dced_JaffaCakes118
Files
-
40b926c481e033f623a4a99fa858dced_JaffaCakes118.exe windows:1 windows x86 arch:x86
e2649837c59f87885ca4eb82bebd799b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualFree
GetProcAddress
EnumSystemCodePagesA
GetModuleHandleA
ExitProcess
user32
DialogBoxParamA
Sections
.code Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 282B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ