Static task
static1
Behavioral task
behavioral1
Sample
63131464af5b0184f303967bb5dbc724_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
63131464af5b0184f303967bb5dbc724_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
63131464af5b0184f303967bb5dbc724_JaffaCakes118
-
Size
1.2MB
-
MD5
63131464af5b0184f303967bb5dbc724
-
SHA1
d0cc18e440ee53c6fee81e595bb11821eee4b49c
-
SHA256
11719802d639e3958850053ac450c2e7e18f24a9b4befcab19b7a77ce5bbccf0
-
SHA512
ece88e91dae3b934f6e2a75bad0b0e9cf4183bf1e9a9432cd82b0f5be64f311b39e35c96b0f2f3fdedec1d04fea4b70bca34b7309c1c554336e1e411f44ad66e
-
SSDEEP
24576:o7Wj6XeDmXEah7HC0eOQr1fbw3M5ZrC8taCYnuQCGugeycJ7Yw:KWGXeD0EaRveJrX1aCYnufpHuw
Malware Config
Signatures
Files
-
63131464af5b0184f303967bb5dbc724_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
Certificate
IssuerCN=www.MicroSoft.com,OU=Development,O=MicroSoft,L=Florida,ST=United States,C=us,1.2.840.113549.1.9.1=#0c186d617274696e2e646576404d6963726f536f66742e636f6dNot Before14/07/2015, 15:56Not After08/07/2016, 15:56SubjectCN=www.MicroSoft.com,OU=Development,O=MicroSoft,L=Florida,ST=United States,C=us,1.2.840.113549.1.9.1=#0c186d617274696e2e646576404d6963726f536f66742e636f6d98:2e:e0:e0:53:35:92:01:d7:5d:9e:1c:b2:d3:51:ef:78:6f:51:77Signer
Actual PE Digest98:2e:e0:e0:53:35:92:01:d7:5d:9e:1c:b2:d3:51:ef:78:6f:51:77Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ