Static task
static1
Behavioral task
behavioral1
Sample
40f1db435fc958338cc5fdafd32333ad_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
40f1db435fc958338cc5fdafd32333ad_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40f1db435fc958338cc5fdafd32333ad_JaffaCakes118
-
Size
77KB
-
MD5
40f1db435fc958338cc5fdafd32333ad
-
SHA1
3f646f860a953690ba5d1615959e7ec0eee408df
-
SHA256
b69ca7c98115338cf9c9de17a18a7cc428560f0bc87df54686a0db1ca8a63e18
-
SHA512
2c7b31cbd846240c1337ce7b26223364f43a22437079e5a52f658d78945ed02ed699ced49ee9f771fe73bb89d36a846883bf4c1a3d383cf06e034ce1f80ef39d
-
SSDEEP
1536:/MAY1NvBjTuCumaHBsMLQT6PreSrZ1cGCVnSgT+h2gtKtceQ:/Y1NpvuxcZ7OZufSym2bQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40f1db435fc958338cc5fdafd32333ad_JaffaCakes118
Files
-
40f1db435fc958338cc5fdafd32333ad_JaffaCakes118.exe windows:4 windows x86 arch:x86
9c9cb2c159714000c01553497c4e7e94
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__set_app_type
strcmp
_adjust_fdiv
fread
fclose
malloc
_XcptFilter
_exit
_acmdln
_initterm
sin
strlen
fwrite
printf
_onexit
exit
_except_handler3
__setusermatherr
fseek
fopen
free
__getmainargs
kernel32
Sleep
GetModuleHandleW
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 572B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ