Static task
static1
Behavioral task
behavioral1
Sample
467e3fd2d4bfbbc035e9f9fecac3f37d_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
467e3fd2d4bfbbc035e9f9fecac3f37d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
467e3fd2d4bfbbc035e9f9fecac3f37d_JaffaCakes118
-
Size
1.8MB
-
MD5
467e3fd2d4bfbbc035e9f9fecac3f37d
-
SHA1
65c0a456a8e17b491d8f30bcf2c7a64c7e9245fe
-
SHA256
f4e1e11104741754030f5d637c67779b884ea961a93cb8a14efb8d1961db8e68
-
SHA512
4d6ecef231bbd573f21b18fa499f125c9041c6dfdc42d7386d6654fc4b8e6426eb94e82b695f71871391fbb6cd1155dec4f2c00a8ea131cb0c4122a70e5de407
-
SSDEEP
24576:f6NYX5EBh2GBpK+77094rug4Z3oLdH+C8EobyEb0izDSwePNg4EwFj+wf0BwHYC3:CyDUruLpon8EoeEu3UoG7JkAq
Malware Config
Signatures
Files
-
467e3fd2d4bfbbc035e9f9fecac3f37d_JaffaCakes118.exe windows:4 windows x86 arch:x86
Code Sign
17:e0:5e:ee:80:97:49:88:4f:d8:4a:37:fb:f0:59:4aCertificate
IssuerCN=CityInfoNot Before01/02/2020, 16:38Not After30/12/2020, 21:00SubjectCN=CityInfo8b:8c:95:69:e1:2d:81:d5:b8:f3:26:ff:15:6b:3e:09:08:7c:13:2aSigner
Actual PE Digest8b:8c:95:69:e1:2d:81:d5:b8:f3:26:ff:15:6b:3e:09:08:7c:13:2aDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 1.4MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: 27KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 6KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 56B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 368KB - Virtual size: 367KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BODY Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE