Static task
static1
Behavioral task
behavioral1
Sample
40ab762ecddf6a68f4af5b08239c3323_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
40ab762ecddf6a68f4af5b08239c3323_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40ab762ecddf6a68f4af5b08239c3323_JaffaCakes118
-
Size
673KB
-
MD5
40ab762ecddf6a68f4af5b08239c3323
-
SHA1
715ecd895081ff8af945b47dc67af8ab469a9047
-
SHA256
c05c2c98d32b8e26cad9e7bb6044c8c18ed726d84dce1a110c43c064b7c81437
-
SHA512
0782b47155d25e5fe91b9b08426fa39e0c14d2f9730b8db2571850ad36fe884bd1aa5899807ae97eafef41e62910795ea54072e5df6a4b7113281467283a5c0a
-
SSDEEP
12288:VbhViV8FtR3P0MGLxe0D5D9iNoeik4rhPlMKLnQATbB56atKAbC7NyaWIA:VbhViyR3P0Tx7D5H9PHnzVVspNWd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40ab762ecddf6a68f4af5b08239c3323_JaffaCakes118
Files
-
40ab762ecddf6a68f4af5b08239c3323_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
gPnb0DmW Size: - Virtual size: 800KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UNJosSwG Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Nlr2aZj9 Size: 658KB - Virtual size: 660KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hIeuXDoL Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
84AKuo4J Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
W2HdZRnk Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
9MWRewsO Size: 24B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ