Static task
static1
Behavioral task
behavioral1
Sample
63ab914f6760255c7c6e4f30a5119100_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
63ab914f6760255c7c6e4f30a5119100_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
63ab914f6760255c7c6e4f30a5119100_JaffaCakes118
-
Size
79KB
-
MD5
63ab914f6760255c7c6e4f30a5119100
-
SHA1
5d559ac22d825475f235dd7f3d89d1774eea9459
-
SHA256
2025a72a16c78068c2b2fe1ce87f4b75a52b4c13dd254bda4ef2d4730190eb33
-
SHA512
d83e337060bda0bd07f8a1be91dbf8f6cb56e0d3ea3e65b19934ef11f7068b40fb11767b1b9ef1b0fd20a976423cee4ee486617a1fc716356159e1dbeb687724
-
SSDEEP
1536:DzNnqxdwlKpMbiVmY3aVEx9aZZatfXZs7FJbGMmx5rw2QOhMc8jU/N01jFRk4rxu:DzNqzpMWVf3a8QiEtmx5rwpJpjU101jW
Malware Config
Signatures
Files
-
63ab914f6760255c7c6e4f30a5119100_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
4a:ad:ca:3d:04:5e:92:99:4a:c1:a5:2e:08:ec:a1:66Certificate
IssuerCN=x64-PC\\x64Not Before01/10/2020, 13:42Not After01/10/2021, 19:42SubjectCN=x64-PC\\x642e:85:16:81:df:b7:d9:7f:27:80:9b:5a:76:50:51:a2:0b:fb:86:f1:44:71:65:85:9a:7a:39:4b:b3:2a:af:c2Signer
Actual PE Digest2e:85:16:81:df:b7:d9:7f:27:80:9b:5a:76:50:51:a2:0b:fb:86:f1:44:71:65:85:9a:7a:39:4b:b3:2a:af:c2Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\Users\x64\source\repos\UpLinker\Uplinker\obj\x86\Release\Uplinker.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ