Static task
static1
Behavioral task
behavioral1
Sample
e92addf420d20647c5e4b98310d3210c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
e92addf420d20647c5e4b98310d3210c_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
e92addf420d20647c5e4b98310d3210c_JaffaCakes118
-
Size
289KB
-
MD5
e92addf420d20647c5e4b98310d3210c
-
SHA1
b3f5878696e5c3d1e639b5875b0104414668d7d2
-
SHA256
e29b3d03869556fe1591b3ec11cfc0082e2fc593f6157e908fc8cb4883935b6c
-
SHA512
382669d841a01d762fe8940dff9c4978fe46bd34b45dd85e962460abb411050b3b556b017df5a99d7fbc19febb133eb40f5094ac403849b25231b4fdff8cc448
-
SSDEEP
6144:eF0AuomEQacewyU2o6MOgqQ8STKngJ+vOpMmtchivEqfss/m33NSgufLqEWlxKKZ:eI+mvYdzufZvCy+Df
Malware Config
Signatures
Files
-
e92addf420d20647c5e4b98310d3210c_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
7d:dd:66:2a:a7:c9:bf:b7:4f:81:7c:f5:39:86:ad:c1Certificate
IssuerCN=JetSwap Root CANot Before31/12/2006, 21:00Not After31/12/2035, 21:00SubjectCN=JetSwap Root CAbe:0a:3b:25:15:4b:98:bd:46:48:b9:ad:e2:17:72:7b:d9:b1:d5:0eSigner
Actual PE Digestbe:0a:3b:25:15:4b:98:bd:46:48:b9:ad:e2:17:72:7b:d9:b1:d5:0eDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 282KB - Virtual size: 282KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ