Static task
static1
Behavioral task
behavioral1
Sample
40f18b3b401d6b5aadfb4b7bc4d761af_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
40f18b3b401d6b5aadfb4b7bc4d761af_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40f18b3b401d6b5aadfb4b7bc4d761af_JaffaCakes118
-
Size
638KB
-
MD5
40f18b3b401d6b5aadfb4b7bc4d761af
-
SHA1
2091886d666503601d4b4b09ed7f81b5855ce77e
-
SHA256
fb5b86bebdc509c90e659f1e0cc978beeef050212ebb48205ea42e2a69329e04
-
SHA512
cc9f24107717102d05710c4e4b65dbae22e89848624f018e74f7fce979f8e324fa65a4bca6303db8e7350e0f0638c20c568104e1977411a8014810383daedd52
-
SSDEEP
12288:EKTqVzSSkidUj6V0FPM1Hy8LNAF3Z4mxxJ/2UmkscssfzLnI:EKeVmxiZV51SBQmX52USkfI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40f18b3b401d6b5aadfb4b7bc4d761af_JaffaCakes118
Files
-
40f18b3b401d6b5aadfb4b7bc4d761af_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 322KB - Virtual size: 328KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 314KB - Virtual size: 316KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE