Static task
static1
Behavioral task
behavioral1
Sample
248661a5cf7349e90a9b556db985e153_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
248661a5cf7349e90a9b556db985e153_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
248661a5cf7349e90a9b556db985e153_JaffaCakes118
-
Size
20KB
-
MD5
248661a5cf7349e90a9b556db985e153
-
SHA1
2eb9fd8db231768b279a9d4467aef450657ca1ef
-
SHA256
f31b29e11bd1e8223be750592a85b90149903f9dcd695cdf295a5ea341294ec8
-
SHA512
6bcdeb7e3b40060626bf474359751c459f5ffeee37286becb27e4141aee556f25d0a68aa4bad12666239a5763c9c14db052b5b89f5bc85193dff8094a7f55823
-
SSDEEP
192:PuDwQNRRkqWPjeVen4/o7kLFSqUqQTKDCXy3uyuDwQNRRkqWP:ZG0Dn4uoFSTvTCCie8G0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 248661a5cf7349e90a9b556db985e153_JaffaCakes118
Files
-
248661a5cf7349e90a9b556db985e153_JaffaCakes118.exe windows:4 windows x86 arch:x86
93edc27443724b31c492716d0ecf0491
Headers
Imports
kernel32
GetTempPathA
GetTempFileNameA
GetWindowsDirectoryA
lstrcatA
ExitProcess
CreateProcessA
SetFileAttributesA
GetTickCount
lstrlenA
GetVersion
_lcreat
_lwrite
_lclose
lstrcmpiA
GetProcAddress
LocalAlloc
LoadLibraryA
DeleteFileA
_lopen
_lread
_llseek
LocalFree
GetModuleFileNameA
MultiByteToWideChar
Sleep
CreateMutexA
OpenMutexA
GetLastError
SetUnhandledExceptionFilter
GetModuleHandleA
user32
wsprintfA
ole32
CoInitialize
CoCreateInstance
Sections
Size: 16KB - Virtual size: 16KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE