Static task
static1
Behavioral task
behavioral1
Sample
e29c6b02633402ce8334a687f4ddf49a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e29c6b02633402ce8334a687f4ddf49a_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
e29c6b02633402ce8334a687f4ddf49a_JaffaCakes118
-
Size
359KB
-
MD5
e29c6b02633402ce8334a687f4ddf49a
-
SHA1
788459f61a3ad533907e8ac1fbf574856b9e1032
-
SHA256
07333156d1f08c98f9ea6eb867d6e0231d491fb9f3fa6976ecec62f72bde7a87
-
SHA512
33758eb1f91a5d88f5eaa5ac727f117ae2fa2bcb89f9672744aeb44a7dfd973b9de1697578be313b276d1f8f7106f3b1ca8359d25d26de429c44fdb57aac739c
-
SSDEEP
6144:k/na4Sy3A9L2gH2UJRa2M8NNlpoKr80L6V7e9f44JyFaE+39VhLhiPmtxQ4vGph5:cnaHy3A2gWUJ4lkTpoKw7e9f44sF8VNE
Malware Config
Signatures
Files
-
e29c6b02633402ce8334a687f4ddf49a_JaffaCakes118.exe windows:1 windows x86 arch:x86
Code Sign
04Certificate
IssuerCN=KISA RootCA 1,OU=Korea Certification Authority Central,O=KISA,C=KRNot Before24/08/2005, 08:05Not After24/08/2025, 08:05SubjectCN=KISA RootCA 1,OU=Korea Certification Authority Central,O=KISA,C=KR03:f3Certificate
IssuerCN=yessignCA General Class 2,OU=AccreditedCA,O=yessign,C=krNot Before18/07/2010, 15:00Not After19/07/2011, 14:59SubjectCN=AD79 Corp,OU=code-sign+OU=02201007190001,O=yessign,C=krExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
27:72Certificate
IssuerCN=KISA RootCA 1,OU=Korea Certification Authority Central,O=KISA,C=KRNot Before02/02/2007, 09:32Not After02/02/2017, 09:32SubjectCN=yessignTSA,OU=AccreditedCA,O=yessign,C=krExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
27:84Certificate
IssuerCN=KISA RootCA 1,OU=Korea Certification Authority Central,O=KISA,C=KRNot Before30/04/2010, 01:50Not After30/04/2020, 01:50SubjectCN=yessignCA General Class 2,OU=AccreditedCA,O=yessign,C=krKey Usages
KeyUsageCertSign
KeyUsageCRLSign
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ