Static task
static1
Behavioral task
behavioral1
Sample
d40b678e95f1da65cc0c268589f7da38_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d40b678e95f1da65cc0c268589f7da38_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d40b678e95f1da65cc0c268589f7da38_JaffaCakes118
-
Size
44KB
-
MD5
d40b678e95f1da65cc0c268589f7da38
-
SHA1
9ef9cd653a56531538576e117151e52251aa5b5e
-
SHA256
2d2bb6aed2e699470857018956b7568393c15a5968c5569e866b86cc4a03f510
-
SHA512
b55e9ea4453221a659cef937e04a86a39fef4db0e6e51283838e579b2dbe45d074d1b1ee177398fd0abbf8a6808503c69fbf8819826941ed62e78136245aa7e9
-
SSDEEP
768:cevLangWpOzOu3t05i3reFqZgLLNlkHTHgQRcT5SKrB0ZA:cev7OLCtfezvNSo5SKrB0ZA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d40b678e95f1da65cc0c268589f7da38_JaffaCakes118
Files
-
d40b678e95f1da65cc0c268589f7da38_JaffaCakes118.exe windows:5 windows x86 arch:x86
1ecbea1f30b633c60ac98e525aff9666
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DisconnectNamedPipe
MapViewOfFile
user32
PeekMessageA
Sections
.hahsv Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.argzat Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xybkz Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ