Static task
static1
Behavioral task
behavioral1
Sample
02c5f4d16d0e55e39631c59f4775ed2f_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
02c5f4d16d0e55e39631c59f4775ed2f_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
02c5f4d16d0e55e39631c59f4775ed2f_JaffaCakes118
-
Size
728KB
-
MD5
02c5f4d16d0e55e39631c59f4775ed2f
-
SHA1
156443b06fa81d25109e3de8622e8d2529c1e44a
-
SHA256
c2d82b63362d4fa334b54ccc47a076390b54c8097373bb3c4f27e4e3033c78ab
-
SHA512
2b7ff897431c2912c2372337263b9f2f204ff814442e7edc8315d65e93bbf585aca0a0d79c7dc4df4eeb5dc3e776c66c081ca4c33ea4f0c44e87087df4ab6f00
-
SSDEEP
12288:yDm4zmbc6IW4tnaSCzlWeC6Ql2SI8fVORnvsgHcO:7smTInNa53hLMVaLcO
Malware Config
Signatures
Files
-
02c5f4d16d0e55e39631c59f4775ed2f_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
57:12:cc:d4:15:ee:f0:8c:4d:de:27:a2:a4:5c:f4:96Certificate
IssuerCN=KINGSTON-PC\\KingstonNot Before16/07/2020, 21:03Not After17/07/2021, 03:03SubjectCN=KINGSTON-PC\\Kingston40:d8:55:f3:d9:a5:46:58:7c:f7:96:11:03:fa:1b:43:85:5d:94:0b:c1:8f:f7:4a:7a:72:24:e5:df:f6:a5:c4Signer
Actual PE Digest40:d8:55:f3:d9:a5:46:58:7c:f7:96:11:03:fa:1b:43:85:5d:94:0b:c1:8f:f7:4a:7a:72:24:e5:df:f6:a5:c4Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
C:\Users\sky-k\Desktop\新增資料夾 (3)\src\obj\Debug\FiveM_Launcher.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 659KB - Virtual size: 659KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ