Static task
static1
Behavioral task
behavioral1
Sample
40bf6760dde864f0e2f241e17c37a3e1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
40bf6760dde864f0e2f241e17c37a3e1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40bf6760dde864f0e2f241e17c37a3e1_JaffaCakes118
-
Size
53KB
-
MD5
40bf6760dde864f0e2f241e17c37a3e1
-
SHA1
33d080e07684b193db9f80611de6a18dc76f68ed
-
SHA256
cd74483d08cfe59208b1f9703cddeea4a65cb78eab559d73b8ef778e423c25ae
-
SHA512
7423b74ee0d8c4709166f468dc3789a2c766f2aa85633094afd4f7f61f5d2fb6963e4727db9b0ab6a017bf0def12878f4f89d5932016aa5011f64b4a2e7777b7
-
SSDEEP
1536:tCKoLD+h/84UimkdxMu5Tj4espq3ulOsAP:tCKomy45ZXjspq38JAP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40bf6760dde864f0e2f241e17c37a3e1_JaffaCakes118
Files
-
40bf6760dde864f0e2f241e17c37a3e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
8afbf9211984274dc7a21b630ecae242
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap
user32
MessageBoxA
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ