Static task
static1
Behavioral task
behavioral1
Sample
3b50382740a6795269a86ac6870e0685_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3b50382740a6795269a86ac6870e0685_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3b50382740a6795269a86ac6870e0685_JaffaCakes118
-
Size
63KB
-
MD5
3b50382740a6795269a86ac6870e0685
-
SHA1
3bc9b255633c06e519a1f553185a654346e3d269
-
SHA256
4b77eb6b38777e05d0c68493162d1dac025068d338885195f2a10ab4694a44a1
-
SHA512
1f0e62e181030042202aeee8e17ef19718c12ef2991645ab3a28e0aee13b1d43e453a9ea790e3ba4aaec2f373162ac9b388277a5e6300c4416d5e3a8eeda0c00
-
SSDEEP
1536:7XoazrF7SAy79W2XK9NKdSuMw/mQRIet71:rvx7o78I9/ZIeB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3b50382740a6795269a86ac6870e0685_JaffaCakes118
Files
-
3b50382740a6795269a86ac6870e0685_JaffaCakes118.exe windows:4 windows x86 arch:x86
9d90aca1387747f98849086d0d15175d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
SetFileTime
VirtualAlloc
VirtualProtect
user32
EndDialog
GetDlgItem
advapi32
RegCloseKey
RegEnumKeyExA
DuplicateTokenEx
Sections
.text Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE