Static task
static1
Behavioral task
behavioral1
Sample
003275cf24487841e1cee9da0bb8996b_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
003275cf24487841e1cee9da0bb8996b_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
003275cf24487841e1cee9da0bb8996b_JaffaCakes118
-
Size
18KB
-
MD5
003275cf24487841e1cee9da0bb8996b
-
SHA1
0df79681e429b42f671ea0d49cea0b37658989f4
-
SHA256
234c577befa91305c8fb7eada4b2584d25ad3b837a1b4b46028d0fad43a5f35d
-
SHA512
2f4ae3e63ab2b97740e9d2e3726b3df5f9572d05783e1e3acb556c291fee89799199baf5279cab10c99b1ea7fe5be0f449085e0fcef12d1ce893f1af8dd7c636
-
SSDEEP
192:pBx/ZK6/Chr8oD0SIgmCHXIPU4bq+MLBX9ggOR7qOMP4fPRZEqYg9w:bxfdz6jQKZSgOReOMP4f1Yg9w
Malware Config
Signatures
Files
-
003275cf24487841e1cee9da0bb8996b_JaffaCakes118.exe windows:4 windows x86 arch:x86
5b492d0272c3617978c8d2bdd5761b99
Code Sign
22:a7:55:10:ab:15:0f:a8:41:4e:06:36:84:7d:44:8dCertificate
IssuerCN=WewaaarereNot Before27/03/2012, 09:00Not After31/12/2039, 23:59SubjectCN=Wewaaarereed:1a:e5:da:79:97:ee:39:b0:45:f0:84:f5:7c:d1:ee:c3:f8:03:68Signer
Actual PE Digested:1a:e5:da:79:97:ee:39:b0:45:f0:84:f5:7c:d1:ee:c3:f8:03:68Digest Algorithmsha1PE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
LoadLibraryA
Sleep
VirtualFree
GetVersion
user32
UpdateWindow
DispatchMessageA
ShowWindow
RegisterClassExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 352B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 119B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ