Static task
static1
Behavioral task
behavioral1
Sample
1509df728aca75cdfa665897d4359f1a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1509df728aca75cdfa665897d4359f1a_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
1509df728aca75cdfa665897d4359f1a_JaffaCakes118
-
Size
1.0MB
-
MD5
1509df728aca75cdfa665897d4359f1a
-
SHA1
e877c6f548a8bea17d67388764ff1e365372cd0a
-
SHA256
4589d645709ef29048146d23aa6bc9429f9f5e0fc7b74a635e6d98d9dc457039
-
SHA512
6c375ab0b113830367b3e5198d4830e31d2e76bf821fc1aa19f32c60aaf219a056a11cd8d27143f45a637be1bde43606f7bc9c27800deb6a90f277b7531897d6
-
SSDEEP
12288:7n0on38Lb5PEblFLFuFLEVpjGNFld2p+ojIZZGJTTGob+Ab+7uEgpznnGZh7lfYO:4onKb5cbgUkF7d7GJT6oiAiSEO6hPV
Malware Config
Signatures
Files
-
1509df728aca75cdfa665897d4359f1a_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Certificate
IssuerCN=www.Whitehouse.com,OU=President,O=Whitehouse,L=Capital,ST=Washington,C=us,1.2.840.113549.1.9.1=#0c16636f6e74616374405768697465686f7573652e636f6dNot Before23-06-2015 14:14Not After22-06-2016 14:14SubjectCN=www.Whitehouse.com,OU=President,O=Whitehouse,L=Capital,ST=Washington,C=us,1.2.840.113549.1.9.1=#0c16636f6e74616374405768697465686f7573652e636f6dba:bc:db:ac:04:12:c8:de:9c:f3:03:99:8f:32:0b:96:e8:47:3f:71Signer
Actual PE Digestba:bc:db:ac:04:12:c8:de:9c:f3:03:99:8f:32:0b:96:e8:47:3f:71Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 858KB - Virtual size: 858KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 178KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ