Static task
static1
Behavioral task
behavioral1
Sample
06405bd3ceef5468a86df3da69b57767_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
06405bd3ceef5468a86df3da69b57767_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
06405bd3ceef5468a86df3da69b57767_JaffaCakes118
-
Size
161KB
-
MD5
06405bd3ceef5468a86df3da69b57767
-
SHA1
1c9ef238a221ee066815cd504c2dabbde8d4a3a0
-
SHA256
c5bc1ac19c4fd731ee08343c4eabbe74cfcd8c6477d8cf74c3574d17c7abfc8b
-
SHA512
31a4dbd96227bdd4dbdedea6de43feb2f0531296cda84dc4b7ce7fe6b92f7f6320f3ceabaa95b0e7151b93a81b44475d6cd12498455c0973ba2ce98fda76a5f0
-
SSDEEP
3072:xZr9Sae/ofK6E1BX+RKZl/JURnhijR4Bop74dw8/yKulimzCz:xRoXAK60cKZnUWjFM//yZXCz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06405bd3ceef5468a86df3da69b57767_JaffaCakes118
Files
-
06405bd3ceef5468a86df3da69b57767_JaffaCakes118.exe windows:4 windows x86 arch:x86
ab70b8484fadc9272625e1e2f86c267a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameA
lstrcpyA
WriteFile
lstrcatA
GetEnvironmentVariableA
CreateFileA
CloseHandle
GetModuleFileNameA
advapi32
CloseServiceHandle
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
shell32
ShellExecuteA
user32
wsprintfA
Sections
.data Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE