Static task
static1
Behavioral task
behavioral1
Sample
3652d908f4f1b3120982880c144366a3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3652d908f4f1b3120982880c144366a3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3652d908f4f1b3120982880c144366a3_JaffaCakes118
-
Size
76KB
-
MD5
3652d908f4f1b3120982880c144366a3
-
SHA1
c269837360e772b1562ae41b05306d9834c77213
-
SHA256
e6acb5e874874ebc54a1a992885f38f88123c64455985cf682b8c0c8c5744766
-
SHA512
b7f7f2826913e782559302879a32a4d134c6a63530c007ec466cb36544505c4abb4056dd50aa2643f4ce541602352d58d35612427f2e4639a1f5ff5582f5d5f9
-
SSDEEP
1536:sNJ1KW4zM1WL3rpzEb1zcluwRJXBfE6DOFcg+xqCjpjVrs2ryrd1vUQuq6:qYWRYLNEJzcluwRXgGjHs2qo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3652d908f4f1b3120982880c144366a3_JaffaCakes118
Files
-
3652d908f4f1b3120982880c144366a3_JaffaCakes118.exe windows:4 windows x86 arch:x86
bda18c6654bcbfe65c0ecfb5acdf9b12
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleKeyShortcuts
SetCommTimeouts
OpenProfileUserMapping
SetUserGeoID
OpenWaitableTimerA
GetSystemWindowsDirectoryA
_lclose
HeapWalk
SetFileAttributesW
lstrcpynW
DnsHostnameToComputerNameW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE