Static task
static1
Behavioral task
behavioral1
Sample
5574bc20ec80fec1efcc6982985da3b7_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
5574bc20ec80fec1efcc6982985da3b7_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
5574bc20ec80fec1efcc6982985da3b7_JaffaCakes118
-
Size
101KB
-
MD5
5574bc20ec80fec1efcc6982985da3b7
-
SHA1
a6b09b139f98121913ee49d99bf03a840c9ed759
-
SHA256
d7bbe47230e323adce3fc4497145a2bed61be56dd1b1ac4d163753e020420763
-
SHA512
9d6766dca901ce610046132e3e4f67ab4be23ebecc7e859b7c065db77bac3711bd8dd89128eae074b2840f7fde4cfc638c187b511e1ca012e216c1c6c5839606
-
SSDEEP
3072:KZr9wwf66M7LVPUb4K2tRYFLVofJLvu++:KRy8qNPV1aFLVofl2++
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5574bc20ec80fec1efcc6982985da3b7_JaffaCakes118
Files
-
5574bc20ec80fec1efcc6982985da3b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
ab70b8484fadc9272625e1e2f86c267a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameA
lstrcpyA
WriteFile
lstrcatA
GetEnvironmentVariableA
CreateFileA
CloseHandle
GetModuleFileNameA
advapi32
CloseServiceHandle
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
shell32
ShellExecuteA
user32
wsprintfA
Sections
.data Size: 155KB - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE