Static task
static1
Behavioral task
behavioral1
Sample
2742fffb9500feff0d350420e0a67247_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2742fffb9500feff0d350420e0a67247_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2742fffb9500feff0d350420e0a67247_JaffaCakes118
-
Size
18KB
-
MD5
2742fffb9500feff0d350420e0a67247
-
SHA1
5f08ee0ace53c365f54a67a7e2f349817d67a36f
-
SHA256
15bca69220fefea9a1b6d89abaa27c379d476de6bda23415f8c4efe77d0cbfb4
-
SHA512
704d50104e6e4e40af73cd538ad9cc541a9bfae5c9c2997b89e0aaee66a6039a8c0f264c4553ca90d83347c134cd07a07201659d857656c5af5484ee80e570a6
-
SSDEEP
192:IYy2YbFcO6bQqOgevawKIDWJhsswKRgWGUgJne8ARZuokXwuFy7vgnT5BA:GZ+Qrbvwc86mgWGZI3uoewL7veBA
Malware Config
Signatures
Files
-
2742fffb9500feff0d350420e0a67247_JaffaCakes118.exe windows:4 windows x86 arch:x86
5fcb2f4d4bf22d7f8a7aacb4bccfa01c
Code Sign
0e:59:29:d2:35:26:2d:9b:4c:69:b5:c4:52:27:b1:03Certificate
IssuerCN=EqiweroaawaraNot Before02/04/2012, 08:40Not After31/12/2039, 23:59SubjectCN=Eqiweroaawara1a:0e:70:e9:5e:fc:1f:17:6d:a5:78:6f:01:82:02:bf:f1:25:fa:f7Signer
Actual PE Digest1a:0e:70:e9:5e:fc:1f:17:6d:a5:78:6f:01:82:02:bf:f1:25:fa:f7Digest Algorithmsha1PE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
Sleep
VirtualFree
GetVersion
user32
UpdateWindow
DispatchMessageA
ShowWindow
RegisterClassExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 380B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 119B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ