Static task
static1
Behavioral task
behavioral1
Sample
098a58736acc62a249e3a0d88580d042_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
098a58736acc62a249e3a0d88580d042_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
098a58736acc62a249e3a0d88580d042_JaffaCakes118
-
Size
112KB
-
MD5
098a58736acc62a249e3a0d88580d042
-
SHA1
893cea2b59c3e1ee1be6e63bd7855a8f2d62f121
-
SHA256
9893685a287c9eb62fc49b12325d26105b85b40b6d52da0421639e5e1c2cb21e
-
SHA512
6c294e8c096bc686b6db6fc2d5e143b95fd60bfb545d3826184dcc9fab76a8705eb507f1557b51fc5e48cdefa009ac0d57819c0944491d61d6605cf2b375a159
-
SSDEEP
1536:2RJSPMmTqd3dYEHGpqpEsK0ZNOeZDzrQaqULcy6lqnHGTTkZuWS6y0AJ5f2N/hp:UrmTFq6GQeZTQavcy6lqmW5GpHf2lh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 098a58736acc62a249e3a0d88580d042_JaffaCakes118
Files
-
098a58736acc62a249e3a0d88580d042_JaffaCakes118.exe windows:4 windows x86 arch:x86
05e2c4f3d99d32428214b548fc04e62d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualFree
GetModuleHandleA
Sleep
ExitProcess
winmm
timeSetEvent
comctl32
InitCommonControls
Sections
.text Size: 512B - Virtual size: 238B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE