Static task
static1
Behavioral task
behavioral1
Sample
a63cba970cffb865e887bf887c91b9a8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a63cba970cffb865e887bf887c91b9a8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a63cba970cffb865e887bf887c91b9a8_JaffaCakes118
-
Size
45KB
-
MD5
a63cba970cffb865e887bf887c91b9a8
-
SHA1
8a2a78ab976aa14b7216dd94f60d5e4f810929dc
-
SHA256
14537abd4ec229e0c7dd531fff9dca66ffe02383e4cabd2f3d0d5565810153c5
-
SHA512
40f048a4e638b4bbd99a97789332462ff332f238e33116077e69d389a234a1467cb44af88e7315dc8c08fff8c46edc337627ff32cd2739d9a3f5664a97451ad5
-
SSDEEP
768:10302xGaq3iqSGOptWiWx545Mm30tVReD3JvRcY4o/NxSLB4VV:103Ga8yGeWBj45MmaVRGJqYDc1W
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a63cba970cffb865e887bf887c91b9a8_JaffaCakes118
Files
-
a63cba970cffb865e887bf887c91b9a8_JaffaCakes118.exe windows:5 windows x86 arch:x86
71abf9531e2f71f4d7d1f52c5a0e72c9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumValueW
kernel32
CloseHandle
DeleteFileW
HeapAlloc
HeapFree
Sections
.whkl Size: 37KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.onwvcd Size: 2KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dadwz Size: 5KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ