Static task
static1
Behavioral task
behavioral1
Sample
2f20be15c33e33660ab162d956fdbc9e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2f20be15c33e33660ab162d956fdbc9e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2f20be15c33e33660ab162d956fdbc9e_JaffaCakes118
-
Size
577KB
-
MD5
2f20be15c33e33660ab162d956fdbc9e
-
SHA1
eacfb0287a9db865a327f93668c6b9b953b1ec68
-
SHA256
62a7cd63993d0915894511db35cec161f743f017628dedac7abededa212f970d
-
SHA512
cb06875a7a42279a43da4b04edc8bea758da92cc7c627cd010b20b71515ba8c0ae4172e282607ee0c04846f24f47f30817aea3a94b7081bfe2492fff2e668713
-
SSDEEP
12288:8/LW8097zbljJR5mL251xqX2C3pHW2pWfSKrIyqV:8/Lh0RA21x02Q2f+FV
Malware Config
Signatures
Files
-
2f20be15c33e33660ab162d956fdbc9e_JaffaCakes118.exe windows:4 windows x86 arch:x86
5002e9b875baf28d02e9d97d5ed6b2a7
Code Sign
01Certificate
IssuerCN=Canonical enforce workstation,O=Groupset media canonical TDC,C=UKNot Before20/02/2019, 08:30Not After19/02/2021, 08:30SubjectCN=Canonical enforce workstation,O=Groupset media canonical TDC,C=UK03:01:9a:02:3a:ff:58:b1:6b:d6:d5:ea:e6:17:f0:66Certificate
IssuerCN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before22/10/2014, 00:00Not After22/10/2024, 00:00SubjectCN=DigiCert Timestamp Responder,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
06:fd:f9:03:96:03:ad:ea:00:0a:eb:3f:27:bb:ba:1bCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before10/11/2006, 00:00Not After10/11/2021, 00:00SubjectCN=DigiCert Assured ID CA-1,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageServerAuth
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
ExtKeyUsageEmailProtection
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ad:35:ac:d5:71:a0:0f:f6:7f:34:fa:24:56:a4:80:21:e8:b6:fc:aaSigner
Actual PE Digestad:35:ac:d5:71:a0:0f:f6:7f:34:fa:24:56:a4:80:21:e8:b6:fc:aaDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord667
ord631
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord606
ProcCallEngine
ord646
ord578
ord100
ord616
ord618
Sections
.text Size: 564KB - Virtual size: 561KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ