Static task
static1
Behavioral task
behavioral1
Sample
2136f096e70c9081b9284af78456e146_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
2136f096e70c9081b9284af78456e146_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2136f096e70c9081b9284af78456e146_JaffaCakes118
-
Size
19KB
-
MD5
2136f096e70c9081b9284af78456e146
-
SHA1
8df232e32ca6f589fa431dc1b395c3ec2333a0ff
-
SHA256
f62cd94f12e4fdef708b8f69f6e5440b5a803f5c26d42220b6f26b70a9f08723
-
SHA512
3f586f9950761da78a170c8573d79827b06306751e6021b910d778945b6acff1c69af0609715acd2dca136b07ab556f457967802a27876ae91447c2d70443376
-
SSDEEP
192:iDQyOdzGM+WboA5ex08sqyzzSS+E/OUhAq3uHK0rGUMdLlr40W3+x9wcvY:iDQuMbZ408dEuUhAC0rGzJs0W3+x6cvY
Malware Config
Signatures
Files
-
2136f096e70c9081b9284af78456e146_JaffaCakes118.exe windows:4 windows x86 arch:x86
670b6c41e822c1578415690e72edf22d
Code Sign
10:49:20:0c:38:db:9f:98:41:d0:4d:52:dd:33:4c:4fCertificate
IssuerCN=WiqiqariqawaaNot Before11/03/2012, 07:53Not After31/12/2039, 23:59SubjectCN=Wiqiqariqawaa7a:bf:ce:7e:ec:37:8e:73:3b:00:e2:f9:d4:c1:47:6f:60:b3:1d:32Signer
Actual PE Digest7a:bf:ce:7e:ec:37:8e:73:3b:00:e2:f9:d4:c1:47:6f:60:b3:1d:32Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
Sleep
VirtualFree
LoadLibraryA
user32
ShowWindow
UpdateWindow
DispatchMessageA
RegisterClassExA
PostQuitMessage
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 356B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 134B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 264B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ