Static task
static1
Behavioral task
behavioral1
Sample
17051b93f1abc27b7331ff50cef66dcc_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
17051b93f1abc27b7331ff50cef66dcc_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
17051b93f1abc27b7331ff50cef66dcc_JaffaCakes118
-
Size
22KB
-
MD5
17051b93f1abc27b7331ff50cef66dcc
-
SHA1
cba7796e531638b116ee717ea2d826b900c5ec57
-
SHA256
9d611645e1f583ef6158ad515297fe162f10acefcbe8310b8799aa849dea46a1
-
SHA512
53b8c944b4d8fca8ea66a07b5ed103a0af6d6d6099a82ac9571f204b9dc22307a60f00cbf914fa78463a079994d1bf9ecfc80149be193248ea21a3f193699720
-
SSDEEP
384:P5BVKjJA856j2npkU2UPY7l/qFmWyeNdrfIiX5nmWHdQdQQJ6K5Mc+E/1eKa7BGP:P5BUjm85p92OsCU/grI+sGdQCQ7Mhu1V
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 17051b93f1abc27b7331ff50cef66dcc_JaffaCakes118
Files
-
17051b93f1abc27b7331ff50cef66dcc_JaffaCakes118.exe windows:4 windows x86 arch:x86
ab70b8484fadc9272625e1e2f86c267a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameA
lstrcpyA
WriteFile
lstrcatA
GetEnvironmentVariableA
CreateFileA
CloseHandle
GetModuleFileNameA
advapi32
CloseServiceHandle
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
shell32
ShellExecuteA
user32
wsprintfA
Sections
.data Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE