Behavioral task
behavioral1
Sample
24359ee1991a1715bd95ee2920c9984e_JaffaCakes118.exe
Resource
win7-20240319-en
Behavioral task
behavioral2
Sample
24359ee1991a1715bd95ee2920c9984e_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
24359ee1991a1715bd95ee2920c9984e_JaffaCakes118
-
Size
164KB
-
MD5
24359ee1991a1715bd95ee2920c9984e
-
SHA1
96bcc9cda0bff12f614422af756bba7919c2acc9
-
SHA256
4bb96dffcc0b4cba1f4ee2ed04e32d724e486c88b0e8492b3e5efb1ec0928c0e
-
SHA512
4ea47a99d1d1de7b7b8a15037aeae281b8d544aeb13d3eade1f3e5e78a5518a8d0a79285da9dd52b92268625d02a4cb404cb6ba9ef85a9aa070fc235b04615d4
-
SSDEEP
3072:W7psS2npp9ymO/pw4imY0bXkN6edhTOYEUvCJ6Trad+:Wu/emIpwdrTN6edhSYdg6fR
Malware Config
Extracted
xloader
2.5
c8te
solendshop.com
petanimals2021.com
infullylucky.com
advisormarketing.online
hgfdsx.com
bjshsq.com
43454255.xyz
newsexpressed.com
tenacityshipping.com
y-promotion.com
saltypigeon.com
acemodule.com
satisfaction-spa.com
evertownnyc.com
orgoheart.com
bankerszonemock.com
conveniente-prestamo.com
suprememodelmanagement.com
ego-designteam.com
mecanicotijuana.com
audioservers.com
the-show-off.com
architectemaroc.com
desertvalleyoutdoors.com
skyejewelryshop.com
slingplugrentals.com
xn--laksevg-jxa.com
protection-onepa.com
smartchemlawn.com
newday.blue
thewriterscorp.com
godaddys.xyz
carolinasdazoom.com
byemantarie.quest
shhysh.com
paypal-caseid198.com
navasoft.net
secureremoteworkforce.science
brandimise.com
weihelper.net
bcmegroupbrd.xyz
thegrillgrinders.com
perfectpcshop.com
thr33zi3.com
vuabunbo.com
lehtx.net
besrbee.com
thebossfrequency.com
mydenspace.com
657haber.com
fasteang.com
bymedia.media
absolutetrainingcentre.com
hackensacksalon.com
yhqm678pafc.com
shtfinc.net
hanbatang.com
jum-bled.xyz
feifenke.com
babe058.com
entrefinaera.com
engroconnects.com
wangyihao.xyz
ctlcloudfr.com
art-space.xyz
Signatures
Files
-
24359ee1991a1715bd95ee2920c9984e_JaffaCakes118.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ