Static task
static1
Behavioral task
behavioral1
Sample
40eda8d4cc7af11fca985c5ed9968ab8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
40eda8d4cc7af11fca985c5ed9968ab8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40eda8d4cc7af11fca985c5ed9968ab8_JaffaCakes118
-
Size
543KB
-
MD5
40eda8d4cc7af11fca985c5ed9968ab8
-
SHA1
3554c63699ae6f5546d3dfeb78923cfe545e4484
-
SHA256
607ee2a9d082ec6fd2287f44de64b1a61e832f8e2a6250f15a3d3bc63296acf7
-
SHA512
6084b454bd72f1247216f1c7d151a5f4d8bd684219cfd3afbc58973d821978fe47e08771d58eccaa5219e5fb115211f56dec643b3b026f9d650e0755d7536627
-
SSDEEP
12288:R7me61tI6NHzhzxbBM/5Y98cXoPLCT1c2obY7y7yn6dSskksCl44P:RCe61ttNHzviY9SPLcocmA6dSsrsCl4m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40eda8d4cc7af11fca985c5ed9968ab8_JaffaCakes118
Files
-
40eda8d4cc7af11fca985c5ed9968ab8_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 776KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 270KB - Virtual size: 272KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 262KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE