Static task
static1
Behavioral task
behavioral1
Sample
d40df2142dd064d46a884d8e1d770078_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
d40df2142dd064d46a884d8e1d770078_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d40df2142dd064d46a884d8e1d770078_JaffaCakes118
-
Size
149KB
-
MD5
d40df2142dd064d46a884d8e1d770078
-
SHA1
6639d6b3d387d7b4e87c4b3a184ba365ebcef21e
-
SHA256
7fdda5abb62b898c77ae0d0c8ec08d025c69fbeb780c03f71719d6971eed3a8f
-
SHA512
45977ba59e60aaedeaecd4ae514782588f19c1286ce0e32188d1414e7485292a7c99e3cb39b08900b39b43f12c8ada8df3f4dcf8341f0d809ee6215949c3237f
-
SSDEEP
3072:KC7Hwbw1LTPYCsB+NPu1lp+fxJgaZvr2IF6+LOPfuE5KBY2a8Xfxmiuizz1Tv+m:KC7Hwbw1LYUNPu1z12vh6+LOHr5KBYP+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d40df2142dd064d46a884d8e1d770078_JaffaCakes118
Files
-
d40df2142dd064d46a884d8e1d770078_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
obr49er5 Size: - Virtual size: 208KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ss Size: 144KB - Virtual size: 148KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ceor Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE