Static task
static1
Behavioral task
behavioral1
Sample
77de6f9b20b09d945016efd018f66639_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
77de6f9b20b09d945016efd018f66639_JaffaCakes118.exe
Resource
win10v2004-20240729-en
General
-
Target
77de6f9b20b09d945016efd018f66639_JaffaCakes118
-
Size
75KB
-
MD5
77de6f9b20b09d945016efd018f66639
-
SHA1
1d7cdb79c5c77cbe50a0662a508c54095a96a999
-
SHA256
c0e1157ec0a7e6488a047791020c1fcc6138697908da11b2df7e2dbc5512a518
-
SHA512
5c3151f05e84fc5db8e91353679f4ee177c27cf54ce9c87b371428834a8368e389d6cef2d7a3101c82cf5e052119099d06ce35ef7bdab160f48f2b6052a2adf8
-
SSDEEP
1536:4wOIaQKqqhcS6voiL0Z86w5Xh9MXg5uynREXvAcs60hdm:4wOI2Rh0ywp8Pmo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77de6f9b20b09d945016efd018f66639_JaffaCakes118
Files
-
77de6f9b20b09d945016efd018f66639_JaffaCakes118.exe windows:4 windows x86 arch:x86
25641378b5dc5009ac830142de7f88f8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameA
GetModuleFileNameA
lstrcpyA
WinExec
lstrcatA
GetEnvironmentVariableA
CreateFileA
WriteFile
Sleep
CloseHandle
advapi32
CreateServiceA
OpenServiceA
StartServiceA
CloseServiceHandle
OpenSCManagerA
shell32
ShellExecuteA
Sections
.data Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE