Static task
static1
Behavioral task
behavioral1
Sample
3708f4f6f6165fa628426447ee0b69a4_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3708f4f6f6165fa628426447ee0b69a4_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3708f4f6f6165fa628426447ee0b69a4_JaffaCakes118
-
Size
337KB
-
MD5
3708f4f6f6165fa628426447ee0b69a4
-
SHA1
67c3869e2449e3105639b2684b6ae06865d53c5a
-
SHA256
72b3fc1d97dfc7461f6a33f3761c603c73eaf15fcfd7e7290ca5abd2bf03b561
-
SHA512
278c0adc70987a3ae9ee9b6a5236d2a7f7ab28a46e84fb1ea6daaabb36b8d59564a3aca4cd5e3a0a05d52a38f83e0b907f8e5f3e05cd492a3b2d9c0bd4f89bb1
-
SSDEEP
6144:q7Fhjrxd4lakFcJtX7HW5XH7Xv6Ak2GBJR1ND1iS6uq3kPdyumdBFN:6Fhj1CrFc3X7HoHj2D/z6fUA/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3708f4f6f6165fa628426447ee0b69a4_JaffaCakes118
Files
-
3708f4f6f6165fa628426447ee0b69a4_JaffaCakes118.exe windows:4 windows x86 arch:x86
9e2f723e804b7fe4582bd13202fc4580
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
FindAtomA
ReleaseMutex
LoadLibraryW
CreateThread
GetComputerNameA
CreateFileA
GetCommandLineA
GetFileAttributesA
GetSystemTime
SetLastError
CloseHandle
HeapCreate
LocalFree
GetDiskFreeSpaceW
ReleaseMutex
lstrcatA
SetEvent
LoadLibraryA
GetDriveTypeW
user32
FillRect
GetClassInfoA
CreateWindowExA
GetKeyState
SetFocus
DrawStateA
DestroyCaret
GetClipCursor
DispatchMessageA
GetDlgItem
GetComboBoxInfo
CloseWindow
CallWindowProcA
cryptnet
CertDllVerifyCTLUsage
CryptCancelAsyncRetrieval
CryptGetTimeValidObject
CryptUninstallCancelRetrieval
CryptGetObjectUrl
desk.cpl
DisplaySaveSettings
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 412KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 324KB - Virtual size: 324KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ