Static task
static1
Behavioral task
behavioral1
Sample
358b34ecb9cb21ad76c237eb7911f92d_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
358b34ecb9cb21ad76c237eb7911f92d_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
358b34ecb9cb21ad76c237eb7911f92d_JaffaCakes118
-
Size
504KB
-
MD5
358b34ecb9cb21ad76c237eb7911f92d
-
SHA1
ba8d3865302a643337f2ed02b857be0ebc77c4aa
-
SHA256
848b7dabff815646cc6b2fe7f5ed743fe3a02ee09ea86c15c8084bb537c316e1
-
SHA512
f059d5236e5c91382181637d09483f0a4381056897ed3d371ef7975c866755c4602b46ecc673cb1c493998ceb83f3c944e92c5b0a67f41eda5b91b22d0b5206f
-
SSDEEP
6144:rbDqJx/6DnzCpB8N/ubGMpk3I1AjFUZxIyKBVrnd4:rbD2x/6fcBI/xU2cZ6Dtd4
Malware Config
Signatures
Files
-
358b34ecb9cb21ad76c237eb7911f92d_JaffaCakes118.exe windows:4 windows x86 arch:x86
2189514ae3d5b5972d5832417dc36ce1
Code Sign
01Certificate
IssuerCN=Pioneer.com,O=Pioneer,C=DENot Before13/02/2019, 07:28Not After13/02/2020, 07:28SubjectCN=Pioneer.com,O=Pioneer,C=DE4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77Certificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before31/12/2015, 00:00Not After09/07/2019, 18:40SubjectCN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
7f:e0:9c:9f:f3:26:fc:4d:5a:9d:48:b7:8d:08:bf:6b:d1:8f:f9:c8:5d:55:d5:63:5e:8b:ce:0e:05:c1:69:6dSigner
Actual PE Digest7f:e0:9c:9f:f3:26:fc:4d:5a:9d:48:b7:8d:08:bf:6b:d1:8f:f9:c8:5d:55:d5:63:5e:8b:ce:0e:05:c1:69:6dDigest Algorithmsha256PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord526
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord609
ProcCallEngine
ord685
ord100
ord616
ord650
Sections
.text Size: 484KB - Virtual size: 482KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ