Static task
static1
Behavioral task
behavioral1
Sample
2166f80212bb6d72da39b203b384ed94_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
2166f80212bb6d72da39b203b384ed94_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
2166f80212bb6d72da39b203b384ed94_JaffaCakes118
-
Size
493KB
-
MD5
2166f80212bb6d72da39b203b384ed94
-
SHA1
621588d0a716b2d8990d5d393ae6d166d9143982
-
SHA256
f0782db3d8ce4b385e894a95cb516f83bfc01855a05185ce2ef0b2bcdb8f31bf
-
SHA512
d58400c24ffe96dee8be3de6ba838f6ddbc62d449ce89f0d7190b6da69066c36834a3a7dec61be5465d5ec4046279bc789a7c6c0cd03b84a5527815a0d6a81a3
-
SSDEEP
6144:R14AOcReS+/iKq9eVrgtTjowyiQObtY2cbkHm2jsT5WiKS+rGeKsOHUGzPR/:RkKUHqPZDyi0b+UT5qIUGzPR/
Malware Config
Signatures
Files
-
2166f80212bb6d72da39b203b384ed94_JaffaCakes118.exe windows:4 windows x86 arch:x86
44e3c695fc1202adeef5bfaee7471e02
Code Sign
01Certificate
IssuerCN=VT carling,O=TerminalVelo,C=TANot Before17/02/2019, 17:02Not After16/02/2021, 17:02SubjectCN=VT carling,O=TerminalVelo,C=TA03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate
IssuerCN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before22/10/2014, 00:00Not After22/10/2024, 00:00SubjectCN=DigiCert Timestamp Responder,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before10/11/2006, 00:00Not After10/11/2021, 00:00SubjectCN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
c7:11:fd:d0:40:24:7a:20:03:8b:32:b2:4a:70:06:0a:9b:e2:c8:4eSigner
Actual PE Digestc7:11:fd:d0:40:24:7a:20:03:8b:32:b2:4a:70:06:0a:9b:e2:c8:4eDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord521
ord631
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord714
ProcCallEngine
ord100
ord616
ord619
Sections
.text Size: 480KB - Virtual size: 479KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ