Static task
static1
Behavioral task
behavioral1
Sample
Johannes.Wallroth.Sharp.World.Clock.v5.51.Incl.Keygen.and.Patch.Incl.Keygen-Lz0.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Johannes.Wallroth.Sharp.World.Clock.v5.51.Incl.Keygen.and.Patch.Incl.Keygen-Lz0.exe
Resource
win10v2004-20240802-en
General
-
Target
8dfa3034f7773e18a196b96c4801f76d_JaffaCakes118
-
Size
20.0MB
-
MD5
8dfa3034f7773e18a196b96c4801f76d
-
SHA1
961aaa45ac42e5ec5b464bdb6312df7e33c12b48
-
SHA256
12c595429a6e6b3ca470c91efa3cd5f102bf60fa13f038ae09a12d676f1fc580
-
SHA512
cc7c270c29297e1d669fefc88623af7a3820b8ccaa3e956c196725a05573f9ada5d20940e52f6f3663d4e2bebacb0be0d34ec66eaf397548109e9f7184f29270
-
SSDEEP
768:JzQ7WycHYmtSPiBTtdZxZRMJRkeuYp2TjnFg:a7WzPSPifdfZRMJCYinFg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Johannes.Wallroth.Sharp.World.Clock.v5.51.Incl.Keygen.and.Patch.Incl.Keygen-Lz0.exe
Files
-
8dfa3034f7773e18a196b96c4801f76d_JaffaCakes118.rar
-
Johannes.Wallroth.Sharp.World.Clock.v5.51.Incl.Keygen.and.Patch.Incl.Keygen-Lz0.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 68KB - Virtual size: 65KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 888B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ