Behavioral task
behavioral1
Sample
22cbecabc9fa91b5896f7c3e2204e756_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
22cbecabc9fa91b5896f7c3e2204e756_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
22cbecabc9fa91b5896f7c3e2204e756_JaffaCakes118
-
Size
13KB
-
MD5
22cbecabc9fa91b5896f7c3e2204e756
-
SHA1
d6fffa9c3daf7564b8124ff3a65b2b264457db13
-
SHA256
eae908f5fc501cf7a92c27246cdc6dfcc282cdbd17ec2d59bd65cdec167c3d8c
-
SHA512
0b5fa2eed8d6dfbfae62be76bcef08ed2566556abc540e802dc9b0d3c473f58ec5c80971156172a86016e1c5c7caa91340eb86ba6f5a056346087079b75b824d
-
SSDEEP
24:eFGSwgiEG/wH+tABEEH+tQtqxtWPjJFWWJno9w1cUzyJK7OTxou9W2n1Y/fngRAd:iwCneyeyqx6NFWuno9a+JfHWZdBgdM
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22cbecabc9fa91b5896f7c3e2204e756_JaffaCakes118
Files
-
22cbecabc9fa91b5896f7c3e2204e756_JaffaCakes118.exe windows:4 windows x86 arch:x86
c23bbe4e58b570b2d26eee9d39cd9f1f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
lstrcpyA
lstrcatA
WriteFile
GetModuleHandleA
ExitProcess
CreateFileA
CloseHandle
crtdll
shell32
SHGetSpecialFolderPathA
ShellExecuteA
ws2_32
Sections
UPX0 Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avp Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE