Static task
static1
Behavioral task
behavioral1
Sample
2eed3318b21249f5c0679a4067977833_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2eed3318b21249f5c0679a4067977833_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
2eed3318b21249f5c0679a4067977833_JaffaCakes118
-
Size
823KB
-
MD5
2eed3318b21249f5c0679a4067977833
-
SHA1
780c788cc50f954a98f7cf10afa22eaff0b31995
-
SHA256
5070d9ab7c24a8324ed1c178cd5a0531ad402286d60315e69841cb0faa353ef6
-
SHA512
aef62d0e893f75b6f2cbeb2a06b44bda11e8fa506784df94cc593d169df66bfb014e1be5d3bb7cb5a7558c89f02ae3a7519c4182cefe2d2e49d80fdd45de3009
-
SSDEEP
12288:Lf7Cv1lWc84zVAiQLrQJNxIhfL0gLT1d1+hgz3NnFWqvwJ46dgjVzNq0jmQ0NYfJ:Lk18GzToQJNhoHN
Malware Config
Signatures
Files
-
2eed3318b21249f5c0679a4067977833_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Certificate
IssuerCN=www.Marketing.com,OU=Marketing,O=Marketing.com,L=Orlando,ST=Calfi,C=us,1.2.840.113549.1.9.1=#0c15636f6e74616374404d61726b6574696e672e636f6dNot Before13/07/2015, 01:49Not After12/07/2016, 01:49SubjectCN=www.Marketing.com,OU=Marketing,O=Marketing.com,L=Orlando,ST=Calfi,C=us,1.2.840.113549.1.9.1=#0c15636f6e74616374404d61726b6574696e672e636f6daf:6f:ec:0b:46:58:23:3e:26:c8:d4:af:c9:d7:69:9a:0f:54:24:5cSigner
Actual PE Digestaf:6f:ec:0b:46:58:23:3e:26:c8:d4:af:c9:d7:69:9a:0f:54:24:5cDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 643KB - Virtual size: 643KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ