Static task
static1
Behavioral task
behavioral1
Sample
aa6e492f57e858a93730454b7fb17390_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
aa6e492f57e858a93730454b7fb17390_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
aa6e492f57e858a93730454b7fb17390_JaffaCakes118
-
Size
78KB
-
MD5
aa6e492f57e858a93730454b7fb17390
-
SHA1
a610409d8f55c0d709e468d7f3924cb90e948ffa
-
SHA256
b1aaea13c34a2d9a22e629a1221146ad66420fc07e73a5ad2333d7fb0f3e7c75
-
SHA512
cbc80aef3694e48423a57368e5cfa2f52cba33448f08f729140623e06408e50a5fe88143207ff090cdc29b49e4e12ff5e0cce5232c3736065071cc67c4998558
-
SSDEEP
1536:NzNnqxdwlKpMbiVmY3aVEx9aZZatfXZs7FJbGMmx5rw2QOhMc8jU/N01jFRk4rx6:NzNqzpMWVf3a8QiEtmx5rwpJpjU101jy
Malware Config
Signatures
Files
-
aa6e492f57e858a93730454b7fb17390_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
4a:ad:ca:3d:04:5e:92:99:4a:c1:a5:2e:08:ec:a1:66Certificate
IssuerCN=x64-PC\\x64Not Before01/10/2020, 13:42Not After01/10/2021, 19:42SubjectCN=x64-PC\\x644a:82:57:36:55:2f:df:e9:3f:f8:01:56:04:12:b3:43:3c:37:a7:58:ae:84:58:cd:93:5f:30:91:82:b8:c9:99Signer
Actual PE Digest4a:82:57:36:55:2f:df:e9:3f:f8:01:56:04:12:b3:43:3c:37:a7:58:ae:84:58:cd:93:5f:30:91:82:b8:c9:99Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\Users\x64\source\repos\UpLinker\Uplinker\obj\x86\Release\Uplinker.pdb
Imports
mscoree
_CorExeMain
Sections
.text Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ