Static task
static1
Behavioral task
behavioral1
Sample
40a0a2828e7e0c1fc5e3081c1ee5a348_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
40a0a2828e7e0c1fc5e3081c1ee5a348_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40a0a2828e7e0c1fc5e3081c1ee5a348_JaffaCakes118
-
Size
20KB
-
MD5
40a0a2828e7e0c1fc5e3081c1ee5a348
-
SHA1
d48e8c9c8eaefe25c3d8410d913cb35587efd430
-
SHA256
e0c2f2785075bc605ea155b6a844f85675cc7a2a8ce9ff8e2b8abf3641ff9787
-
SHA512
1edd9c3aebe540251fe0b66fd3ea0167c1cc4e9680d57ab8eecda810cdceb6a771e09166249e2e13ecc5e45c3bc80a7fe8bcdf7c88bfbfd8249023974ed19b40
-
SSDEEP
384:az7v6qFUolNBHFyBwfMhmA+8RbVeWjuGcPz9MhIf8+oU2FgoCPQ:Gr6qqorZFo1+8DIGcPoIkDU2gtQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40a0a2828e7e0c1fc5e3081c1ee5a348_JaffaCakes118
Files
-
40a0a2828e7e0c1fc5e3081c1ee5a348_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ