Static task
static1
Behavioral task
behavioral1
Sample
015543e4800a317860457db2050b334b_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
015543e4800a317860457db2050b334b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
015543e4800a317860457db2050b334b_JaffaCakes118
-
Size
2.0MB
-
MD5
015543e4800a317860457db2050b334b
-
SHA1
1ca0d3f2682503b30d35a58b0c0eadd33b5fcdb2
-
SHA256
db87be4646ddcd50321d0de6ba514d3393c52684e9cb04fa3259eba5d33c58c4
-
SHA512
99284f601f56a5aff969244b1664bf4240e8309cb58108156a618973157ca96eb89a0e08465ee95708de8ef3e90035c32748bb1daa4c4fff78ccae7b626cd96a
-
SSDEEP
49152:gMy/ubm/qmXGhZMnpYbSeBp0dp3anIg3D:phqGDMpbeLWaIgz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 015543e4800a317860457db2050b334b_JaffaCakes118
Files
-
015543e4800a317860457db2050b334b_JaffaCakes118.exe windows:5 windows x86 arch:x86
71abf9531e2f71f4d7d1f52c5a0e72c9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumValueW
kernel32
CloseHandle
DeleteFileW
HeapAlloc
HeapFree
Sections
.xgjgz Size: 35KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jwv Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.lcnqv Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ