Static task
static1
Behavioral task
behavioral1
Sample
fb366ad8b7645047b8ea32cf599e921b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fb366ad8b7645047b8ea32cf599e921b_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
fb366ad8b7645047b8ea32cf599e921b_JaffaCakes118
-
Size
51KB
-
MD5
fb366ad8b7645047b8ea32cf599e921b
-
SHA1
e4a2d94dc2cde227dcf20d0dad80aa0cd75d5c5b
-
SHA256
fdb8f959a57aa87886dbcfd87ce1f596cb119441e98152ea69b82ec8aabfa1bc
-
SHA512
33cecdd121b721376f0023fcf22be543fca5240d3d520da855cd04b29e31f725ca87bbcf1cd8f0f429bf534e1af4bca9596655c45c5a11d60bfdf3480e24d9a2
-
SSDEEP
1536:+xCQwz7AjVVZ4XO61sUUL7Fxo+atdoF9V2nulF:cgAj2XO6uUykPtdoFunulF
Malware Config
Signatures
Files
-
fb366ad8b7645047b8ea32cf599e921b_JaffaCakes118.exe windows:4 windows x86 arch:x86
Code Sign
01Certificate
IssuerCN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6dNot Before01-08-1996 00:00Not After31-12-2020 23:59SubjectCN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d0aCertificate
IssuerCN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6dNot Before06-08-2003 00:00Not After05-08-2013 23:59SubjectCN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZAExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
3f:13:6cCertificate
IssuerCN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZANot Before10-03-2005 01:48Not After12-02-2007 11:54SubjectCN=Avenue Media N.V.,OU=Secure Application Development,O=Avenue Media N.V.,L=Willemstad,ST=Curacao,C=ANExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 38KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.petite Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 1012B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE