Static task
static1
Behavioral task
behavioral1
Sample
40f65437cda50b7780899340d3d6ae9c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
40f65437cda50b7780899340d3d6ae9c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
40f65437cda50b7780899340d3d6ae9c_JaffaCakes118
-
Size
9KB
-
MD5
40f65437cda50b7780899340d3d6ae9c
-
SHA1
e6d05265aaf7b43d069a0d25f719e5f847ffa9ea
-
SHA256
f09066400e8bb0fa494a7785f19c012741835639ec43acfc1e829ef356823d53
-
SHA512
bddf6df9b7de2c8c54eee03557ca39d05a037160849440f05d838f520b761eee9c02e063fd236fc8d4b8df62a7a2dab4a03b2566f81c5155a2f10a82683c3d91
-
SSDEEP
192:4nM5qSxo1ODK0rZhySK25OQsaSPB6GeAtta0rTYiNbn/:UM5q49DNLK2Nsa8BheZIp/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40f65437cda50b7780899340d3d6ae9c_JaffaCakes118
Files
-
40f65437cda50b7780899340d3d6ae9c_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RT Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ