Static task
static1
Behavioral task
behavioral1
Sample
40d74a5a028765d158afa53a9cf69556_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
40d74a5a028765d158afa53a9cf69556_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
40d74a5a028765d158afa53a9cf69556_JaffaCakes118
-
Size
1.3MB
-
MD5
40d74a5a028765d158afa53a9cf69556
-
SHA1
20e36e3f82d725430c46a752b46b11b9e2342272
-
SHA256
12a3610e72a00b67a86780d45e2bd0e38d41144275b352247232d47282567384
-
SHA512
93321752dfaf1da0ae4217ad41e9eaa86f74e2e6acc3f2e8bcd0cbf18eba460635ef003b58708344fbf21ca2e76bebf26f2ec1b0f42148d6cab7625d9bb00c51
-
SSDEEP
24576:ZSQHqj7vff5cIymms7K9OpkToGGTNd2+EHJnl+GyDDr4+os9V/WGNMx7lM/v3Q+j:ZSQK3mIyml7lZT321H5lDyDn4s9ZBvAK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40d74a5a028765d158afa53a9cf69556_JaffaCakes118
Files
-
40d74a5a028765d158afa53a9cf69556_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ