Static task
static1
Behavioral task
behavioral1
Sample
40b5ffa492e796dbaeb566bba90d81d0_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
40b5ffa492e796dbaeb566bba90d81d0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
40b5ffa492e796dbaeb566bba90d81d0_JaffaCakes118
-
Size
77KB
-
MD5
40b5ffa492e796dbaeb566bba90d81d0
-
SHA1
0ddc582b53cfab734af3576db23210895c5e221e
-
SHA256
24d94e69dd2c5065fded2623d26c065fb86d8d30255ada7c467cf9bba73a6935
-
SHA512
40fd5d7980d4d688273a8bb4f570bc2692613e1baae30c554df217783ee5efd72607b531c0b0e30b9117678fd5efa1118bc45edc87923da8ea81cc25da176b75
-
SSDEEP
1536:DjCjDiUAcGTM7tYf33whg19Wa1q0PsObyeS1ivkx:DjC3iUAcGTWif3/yaw4H4icx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40b5ffa492e796dbaeb566bba90d81d0_JaffaCakes118
Files
-
40b5ffa492e796dbaeb566bba90d81d0_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 377B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ