Static task
static1
Behavioral task
behavioral1
Sample
40d03b670ee8bc86d81cea8421f45f82_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
40d03b670ee8bc86d81cea8421f45f82_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
40d03b670ee8bc86d81cea8421f45f82_JaffaCakes118
-
Size
30KB
-
MD5
40d03b670ee8bc86d81cea8421f45f82
-
SHA1
434ecbc14af47f4346c110c46e224cd6e73846fd
-
SHA256
41ca3a1d0b3c07d6328cec361cabf3483b3c2de2ba2b1fae45e4ec5a571a3c29
-
SHA512
70a86af08e6d53fa5e89bee08ad20c84db9a28ef1d905652d915daccba97fcec0a581e04cdf660af6f80aa8131563ab771013593a0ffe5be889989807c92afb4
-
SSDEEP
768:7dT23rG9vmKjblmD4T8WXQitOc9ViTgrqK1Kv1:iGtxbID88dMiTkqK1Kv1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40d03b670ee8bc86d81cea8421f45f82_JaffaCakes118
Files
-
40d03b670ee8bc86d81cea8421f45f82_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 559KB - Virtual size: 882KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ