Static task
static1
Behavioral task
behavioral1
Sample
098ee880962e49ba1fad0120d80c7e90_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
098ee880962e49ba1fad0120d80c7e90_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
098ee880962e49ba1fad0120d80c7e90_JaffaCakes118
-
Size
254KB
-
MD5
098ee880962e49ba1fad0120d80c7e90
-
SHA1
2f09f3d3db47f1bb9dd55668631af7c7b1ae008e
-
SHA256
1d2b7a81635cbdbdcfc3286167b76f0526b39b2ede9b80bc1d929ddd9dc35a2f
-
SHA512
44fa4766c36bfb3851dcf045c901b8f375f61695a3e587f1847ed345a7712d559c5f089d213372c6bd1104bdaeff3c714fe9f2f305ef6088dee9dd4ae3a98067
-
SSDEEP
6144:WQiL90tzwFkeVhclJKddTMhxBZ06d8SbGqJ:WQiqNnmclcdZMU6SS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 098ee880962e49ba1fad0120d80c7e90_JaffaCakes118
Files
-
098ee880962e49ba1fad0120d80c7e90_JaffaCakes118.exe windows:4 windows x86 arch:x86
5e4ceb1fbe5204f626d427184d42add2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
CreateFileW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DeviceIoControl
FormatMessageW
WideCharToMultiByte
CloseHandle
CreateFileA
GetModuleHandleA
user32
LoadCursorA
msvcrt
__set_app_type
_except_handler3
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__initenv
exit
_cexit
_XcptFilter
_exit
_c_exit
sprintf
_strlwr
malloc
putchar
_controlfp
printf
advapi32
RegOpenKeyW
Sections
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata5 Size: 193KB - Virtual size: 192KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ggg2 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
ggg Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.text9 Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 49KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ