Static task
static1
Behavioral task
behavioral1
Sample
40ce033c88748f805be1e39345814485_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
40ce033c88748f805be1e39345814485_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
40ce033c88748f805be1e39345814485_JaffaCakes118
-
Size
64KB
-
MD5
40ce033c88748f805be1e39345814485
-
SHA1
5e0b19fd471dcebf0c25400546eff4ca38b906ec
-
SHA256
a0090dd16108fee43990f3274c18c7b390a5240c99bcb1e0996df31c59425cf2
-
SHA512
69d07b423d209bf8581874d37dbb9c7381a7dc279d8e32cc77371695d1f6d40d7c5d3d4a45dd213d797109dc7b175c5a0af8a386b39373c69dcf4375ca3c5d1c
-
SSDEEP
192:KKdio61PWKDzO/nfoAefrcfh0OeZpQycdhUA7mZ6QCsiixdWazHI6BCxkr7:5ioIPpzgfu7rydhUuFQCsnwqI6Bkk/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40ce033c88748f805be1e39345814485_JaffaCakes118
Files
-
40ce033c88748f805be1e39345814485_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
CODE Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.fuJyOL Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ydata Size: 4KB - Virtual size: 827B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.FShhMp Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tdata Size: 164KB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.HAmnjh Size: 4KB - Virtual size: 59B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ivtgfG Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.MYaDoz Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ