Static task
static1
Behavioral task
behavioral1
Sample
40dc51706a477ca0a547edd023f1d8f0_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
40dc51706a477ca0a547edd023f1d8f0_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
40dc51706a477ca0a547edd023f1d8f0_JaffaCakes118
-
Size
129KB
-
MD5
40dc51706a477ca0a547edd023f1d8f0
-
SHA1
87bfbbbeec1dda702ec83dc6e9583dd9569e06bc
-
SHA256
d2063d0d4645c76e8dc00be608725367f1cbcbb1d2b9680fea9a410825f845a9
-
SHA512
57eacb11a215ab19bbcfcffd0d54812a3da289cdde15847aaa550384a0b2c69ac144b4e9b45382f8406fa4ba3956585c00c9a3e91a36826d7384d72a58f81894
-
SSDEEP
3072:bJiuv+Qq0TmtCH2kDynq5FrbINdKbUOkpE7uS4hm+0L77:tiuv+t0t2kDEsHIvK177ocN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 40dc51706a477ca0a547edd023f1d8f0_JaffaCakes118
Files
-
40dc51706a477ca0a547edd023f1d8f0_JaffaCakes118.exe windows:4 windows x86 arch:x86
c9b79fc6f7698667ea95e323d46cb898
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
VirtualAlloc
LoadLibraryA
Sleep
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 152B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.const Size: 126KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ