Static task
static1
Behavioral task
behavioral1
Sample
40dac789b5c16663f678a965444bf057_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
40dac789b5c16663f678a965444bf057_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40dac789b5c16663f678a965444bf057_JaffaCakes118
-
Size
671KB
-
MD5
40dac789b5c16663f678a965444bf057
-
SHA1
31ba96d92a41575eb8d2ed70e6707e715e67436a
-
SHA256
a2050e618d21e2a795e0cc802812cc9133a9c79258d140fb93304bc1780431e0
-
SHA512
a6aa4a87a166484a2f8716bce7257393f98d5411f24692887b9fbff5acc40b6f94ac4ddae2bb26b6bb6098706cfbc1f4bf845f9543bef161accee26a7eb5f229
-
SSDEEP
12288:gFCzX9saNDI/UCMwJLVOziExTplB7xXePE6DV+j0rbDibn3XpYxYPSX:gFCzX2wI/x9VOPRpVXyhfDibueg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40dac789b5c16663f678a965444bf057_JaffaCakes118
Files
-
40dac789b5c16663f678a965444bf057_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rdyhrtfj Size: 636KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE