Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_98a3cd52a7b6c1b7dc03c9eb996288b5.exe
Resource
win7-20240903-en
General
-
Target
JaffaCakes118_98a3cd52a7b6c1b7dc03c9eb996288b5
-
Size
187KB
-
MD5
98a3cd52a7b6c1b7dc03c9eb996288b5
-
SHA1
57492c6ea0eab1a8e1ff104acfc024cfb1f142eb
-
SHA256
0d37b18f8b97c4a6e43caaa799f6edda14d8e481c32e0fe0872e587eb0c65ec2
-
SHA512
f62dc6b21de9f35510e4e92bcc81730921730513a32f14ebf7798d1f996cc18c1d305ca7259410a781c7edb92ce739eaf8dc19c27d2f777acae80e724363cfd5
-
SSDEEP
3072:8Y0OQhbF1NPHP56DeKqvBSXeYhZfjnc8uuUfZuLRJHMhEy4A7Vv3kqj60/:8Yaj5vaJqvwjOhuLbMhcAB/9jr/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_98a3cd52a7b6c1b7dc03c9eb996288b5
Files
-
JaffaCakes118_98a3cd52a7b6c1b7dc03c9eb996288b5.exe windows:4 windows x86 arch:x86
6f88311d2cd6f30c50e06d15cee03c2e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeGetTime
timeSetEvent
gdiplus
GdipCloneImage
ole32
OleTranslateAccelerator
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
kernel32
GetVersionExW
QueryMemoryResourceNotification
GetVersionExA
GetProcessHeap
ExitThread
WriteConsoleW
UnhandledExceptionFilter
FlushFileBuffers
WriteConsoleW
GetLocaleInfoA
HeapFree
GetFileType
HeapAlloc
QueryPerformanceCounter
EnumResourceTypesW
InterlockedIncrement
GetFullPathNameW
GetStartupInfoA
HeapAlloc
GetEnvironmentVariableW
GetStringTypeA
MapViewOfFile
GetConsoleCP
GetPrivateProfileSectionNamesA
GetConsoleMode
UnmapViewOfFile
CreateFileA
GetStringTypeW
GetVersionExA
HeapFree
CreateFileMappingA
GetCommandLineA
GetStdHandle
Sections
.text Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ