Static task
static1
Behavioral task
behavioral1
Sample
40c6b5dd19edd4c0072ae492905f5964_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
40c6b5dd19edd4c0072ae492905f5964_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40c6b5dd19edd4c0072ae492905f5964_JaffaCakes118
-
Size
504KB
-
MD5
40c6b5dd19edd4c0072ae492905f5964
-
SHA1
9576e981b3f99d97cdeeead568262cdcd93229ad
-
SHA256
1b3b4f299f33b525875d3e786ce8c2746b412e462ab089d941e98f2c98e5f5bb
-
SHA512
b19778ee947975c777d012449c00019fe54420349357f9168bda795b34dfa2fa711f20f4a5b6f5adb92d95dd38140fdc5e0bf093f849b181f88e5b0931daee73
-
SSDEEP
12288:7ccnYwmlWsSx5/uLQ9+R2H1bThkb6qwbH3S99k:5nYxlW9x5/uU9HFmb6qGC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40c6b5dd19edd4c0072ae492905f5964_JaffaCakes118
Files
-
40c6b5dd19edd4c0072ae492905f5964_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
code Size: - Virtual size: 232KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
text Size: 450KB - Virtual size: 452KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE