Static task
static1
Behavioral task
behavioral1
Sample
4e7e83245c990140ec122b5cc051844f_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
4e7e83245c990140ec122b5cc051844f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
4e7e83245c990140ec122b5cc051844f_JaffaCakes118
-
Size
513KB
-
MD5
4e7e83245c990140ec122b5cc051844f
-
SHA1
9444dc12263f094463d102081fe5fcce4f6bdf17
-
SHA256
9420789591ded2723050fbf9a1bbc16191176ece5172330e73f4ac9b578c1fd3
-
SHA512
4e5b728d1ac49253c097c00b12fd35238ecb5f1d15c41e295e9a3b4b9339956b98a2ec6a496e745e5f415536fad94f56193a6bb7609df0a7ff9f44ddc5b8f239
-
SSDEEP
6144:XtHwyVn7aQCNte6FuDqJhQPRfVD4dNUiXDZz0s521pkocuZBiYrL9F5NEAG88Qhb:F3Vn7aFpovCWcZz022PkoZFOAn6A
Malware Config
Signatures
Files
-
4e7e83245c990140ec122b5cc051844f_JaffaCakes118.exe windows:4 windows x86 arch:x86
d0609f2fc6c8f18d94ade3f52fd0d2c6
Code Sign
01Certificate
IssuerCN=Eclipse common,O=Eclipse saturn,C=UKNot Before09/01/2019, 20:12Not After08/01/2023, 20:12SubjectCN=Eclipse common,O=Eclipse saturn,C=UK09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41Certificate
IssuerCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before04/01/2017, 00:00Not After18/01/2028, 00:00SubjectCN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before07/01/2016, 12:00Not After07/01/2031, 12:00SubjectCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
31:4c:0c:f8:2a:35:3d:15:ac:57:08:52:0b:30:bd:17:61:92:71:94:b7:86:f2:03:1d:b6:6d:51:40:8c:ba:daSigner
Actual PE Digest31:4c:0c:f8:2a:35:3d:15:ac:57:08:52:0b:30:bd:17:61:92:71:94:b7:86:f2:03:1d:b6:6d:51:40:8c:ba:daDigest Algorithmsha256PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
ord698
MethCallEngine
ord523
ord525
EVENT_SINK_AddRef
DllFunctionCall
ord671
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ProcCallEngine
ord645
ord646
ord100
ord616
ord617
ord619
ord650
Sections
.text Size: 480KB - Virtual size: 478KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ