Static task
static1
Behavioral task
behavioral1
Sample
f523b3c6673538becd80b844c332960b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f523b3c6673538becd80b844c332960b_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
f523b3c6673538becd80b844c332960b_JaffaCakes118
-
Size
502KB
-
MD5
f523b3c6673538becd80b844c332960b
-
SHA1
af0c0c2d384b1e00fef4f5cfc70473837d931c88
-
SHA256
20a228add65e4076e047e5276ac61b451226e2c66e5052b3eb7aea89dab85afa
-
SHA512
647e1803819731e8f18272862ce0a5a78c82a66d85e1af58532b20b4334182770a0bbab1a76a5a1b6532311776186e27efce71880dd73fa70fc4ac1d976d2710
-
SSDEEP
12288:HgH+ej5+HDJmsaEalbW3RFwmPp7W4LkqVEp7SZHZ/xd:Hvej5cJmdb0Jd
Malware Config
Signatures
Files
-
f523b3c6673538becd80b844c332960b_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Certificate
IssuerCN=www.MicroSoft.com,OU=Development,O=MicroSoft,L=Florida,ST=United States,C=us,1.2.840.113549.1.9.1=#0c186d617274696e2e646576404d6963726f536f66742e636f6dNot Before14-07-2015 15:56Not After08-07-2016 15:56SubjectCN=www.MicroSoft.com,OU=Development,O=MicroSoft,L=Florida,ST=United States,C=us,1.2.840.113549.1.9.1=#0c186d617274696e2e646576404d6963726f536f66742e636f6d99:49:1d:9b:f2:9d:75:9f:00:19:3d:47:1e:71:80:5b:05:f4:82:d1Signer
Actual PE Digest99:49:1d:9b:f2:9d:75:9f:00:19:3d:47:1e:71:80:5b:05:f4:82:d1Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 321KB - Virtual size: 321KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 177KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ