Static task
static1
Behavioral task
behavioral1
Sample
8ecb8b0947ba35379345771452a90fe9_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8ecb8b0947ba35379345771452a90fe9_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
8ecb8b0947ba35379345771452a90fe9_JaffaCakes118
-
Size
856KB
-
MD5
8ecb8b0947ba35379345771452a90fe9
-
SHA1
819386a186555ddb01ee3e0a99dcf903ea87cd03
-
SHA256
094500b8fc6da401c934f88afa0334b062034f755334e88e881fb435b5f9104d
-
SHA512
1f8fe6530f92cf6f365bcce0b42b940b4d2d72922018ad3ae1531afc68503a945f9b7297c197486a858de5e530b96ba85b0ec00b54ce2c2b339c7d6445ce8a7e
-
SSDEEP
6144:lEbM0CYqwGNCeHeB4Wqfqk1qMZbna+jbRw4u:x0CdwGNCeHeB4WqfqkqMJa+O4u
Malware Config
Signatures
Files
-
8ecb8b0947ba35379345771452a90fe9_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
34:5a:46:9a:d2:59:3a:9e:44:a5:43:91:9e:84:b0:2dCertificate
IssuerCN=MICROSOFT\\UserNot Before01/01/2018, 14:41Not After01/01/2019, 20:41SubjectCN=MICROSOFT\\Userc0:44:e4:a0:06:6e:66:2b:cc:e1:ec:fa:07:1a:63:70:b9:2a:e6:8dSigner
Actual PE Digestc0:44:e4:a0:06:6e:66:2b:cc:e1:ec:fa:07:1a:63:70:b9:2a:e6:8dDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
E:\Hack PC\C#Key\Frunza\BestDriver3.0\obj\mmmm\Defender.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 817KB - Virtual size: 817KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ