Static task
static1
Behavioral task
behavioral1
Sample
25439e4c8298e9d47e518690540ff7e8_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
25439e4c8298e9d47e518690540ff7e8_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
25439e4c8298e9d47e518690540ff7e8_JaffaCakes118
-
Size
20KB
-
MD5
25439e4c8298e9d47e518690540ff7e8
-
SHA1
a677a4787c67e6724c5fc10d168a7e54036931ec
-
SHA256
676e483176326d0c5866702d27913ae2e9b575de74e7a623fd40a7fb7cea99bd
-
SHA512
2de885120785aa1c2e69275ed7d3dcb40ef1d4ed761fda63b42b92a8085860b262038a6be69110f624f96fb30888a368c678d070125de9e16a0efc2d0bc94274
-
SSDEEP
192:N6Ox4jBxTC2GDYMxIh+K5E73BMKDCXy3uI6Ox4jBxTC2:QOx4bGcDh+d2CCieXOx4b
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 25439e4c8298e9d47e518690540ff7e8_JaffaCakes118
Files
-
25439e4c8298e9d47e518690540ff7e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
93edc27443724b31c492716d0ecf0491
Headers
Imports
kernel32
GetTempPathA
GetTempFileNameA
GetWindowsDirectoryA
lstrcatA
ExitProcess
CreateProcessA
SetFileAttributesA
GetTickCount
lstrlenA
GetVersion
_lcreat
_lwrite
_lclose
lstrcmpiA
GetProcAddress
LocalAlloc
LoadLibraryA
DeleteFileA
_lopen
_lread
_llseek
LocalFree
GetModuleFileNameA
MultiByteToWideChar
Sleep
CreateMutexA
OpenMutexA
GetLastError
SetUnhandledExceptionFilter
GetModuleHandleA
user32
wsprintfA
ole32
CoInitialize
CoCreateInstance
Sections
Size: 16KB - Virtual size: 16KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE