Static task
static1
Behavioral task
behavioral1
Sample
2be05bac080103f02890760f3a649740_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2be05bac080103f02890760f3a649740_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2be05bac080103f02890760f3a649740_JaffaCakes118
-
Size
18KB
-
MD5
2be05bac080103f02890760f3a649740
-
SHA1
be89e5441fc08ca4619d9fcfaf6df6c5e83c680e
-
SHA256
9dc4bc527133b1ebf292ca649c2336b3384251600ed124583ff032c246bbf339
-
SHA512
b7e2bdf3e36d190684631def93f819ae25199e4c69f6e6e2c03cbce04ca5130e7db28376763b9fc0892b0c2bd45626ed0402b651a636830a48dd24515ee1fe6e
-
SSDEEP
192:Av0YH7L3eCs3QJ+GlM712HOFjyIApiRKL0X1nGV786Y/o1glDP7yY+inM9DmHD9/:jM3j4Glo4HO18Ey786KlDP+mMxQDUrQ
Malware Config
Signatures
Files
-
2be05bac080103f02890760f3a649740_JaffaCakes118.exe windows:4 windows x86 arch:x86
b2fbb6e933fb751042e53b6e8b8db9e4
Code Sign
1c:2c:83:3b:60:87:6c:b0:4a:92:a2:be:2c:9f:98:5dCertificate
IssuerCN=OqeqaqewiarereNot Before31/12/2010, 22:00Not After31/12/2039, 23:59SubjectCN=Oqeqaqewiareref5:ff:4f:d8:9d:c5:d8:56:a1:bb:ec:f7:48:f7:09:17:de:17:36:eaSigner
Actual PE Digestf5:ff:4f:d8:9d:c5:d8:56:a1:bb:ec:f7:48:f7:09:17:de:17:36:eaDigest Algorithmsha1PE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
GetVersion
GetProcAddress
GetModuleHandleA
GetLastError
GetCommandLineA
ExitProcess
LoadLibraryA
user32
KillTimer
LoadCursorA
PostQuitMessage
RegisterClassExA
SetTimer
TranslateMessage
GetMessageA
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
BeginPaint
GetClientRect
gdi32
CreateCompatibleDC
DeleteDC
GetObjectA
SelectObject
BitBlt
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 768B - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 256B - Virtual size: 178B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ