Static task
static1
Behavioral task
behavioral1
Sample
40cd58d0f497c231d4aff0dc69283bb1_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
40cd58d0f497c231d4aff0dc69283bb1_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40cd58d0f497c231d4aff0dc69283bb1_JaffaCakes118
-
Size
72KB
-
MD5
40cd58d0f497c231d4aff0dc69283bb1
-
SHA1
1c6bb1bdec0d63873156f138b43243534a7667a2
-
SHA256
1558090c3dfd44ebaacf8625e1546179df79bede3ad7d5e6c1e399a7114c993a
-
SHA512
d9479ccddeb22d091801cf63dd662e605df8d422c96b03de16d78b17cccb5a39ecfd3334ed02986f96082dbfd354fe91db642aaf5aee9a756a0cfeb4cc848d35
-
SSDEEP
1536:yRkfczA6Ki3tNGfePAAaOTiueUyDRfemHu7fkZZtq2o7mjMFqifj:1kznPcUBCDRfe8EfiZvWmjMF3j
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40cd58d0f497c231d4aff0dc69283bb1_JaffaCakes118
Files
-
40cd58d0f497c231d4aff0dc69283bb1_JaffaCakes118.exe windows:5 windows x86 arch:x86
09d0478591d4f788cb3e5ea416c25237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
Sections
.text Size: 67KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE