Static task
static1
Behavioral task
behavioral1
Sample
4af498ce46dd9d7faa35ac1584f16c83_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4af498ce46dd9d7faa35ac1584f16c83_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4af498ce46dd9d7faa35ac1584f16c83_JaffaCakes118
-
Size
961KB
-
MD5
4af498ce46dd9d7faa35ac1584f16c83
-
SHA1
b9dfb0bed18b89479414dfbd6cac42f9b1c85f1e
-
SHA256
483406a3312883d75e7e1dfc3f2f0b04e7c0e73ea27174d22e764f409455371a
-
SHA512
abeec1fd296f73de29f27808e063f82f95318ea9e5efed7b2ec659362b96550f5afca6557821fe97e22f159fc10686791ee711e266806faf5b2a199c75d29fe7
-
SSDEEP
24576:2naUXDY6ZdPEWKTj8SegOvZ+tP8AaVbHWjIXBelkWK/9g4isxQd:2agDY6ZZELTrAR+R9aVD+TO9g4FO
Malware Config
Signatures
Files
-
4af498ce46dd9d7faa35ac1584f16c83_JaffaCakes118.exe windows:1 windows x86 arch:x86
Code Sign
04Certificate
IssuerCN=KISA RootCA 1,OU=Korea Certification Authority Central,O=KISA,C=KRNot Before24/08/2005, 08:05Not After24/08/2025, 08:05SubjectCN=KISA RootCA 1,OU=Korea Certification Authority Central,O=KISA,C=KR03:f3Certificate
IssuerCN=yessignCA General Class 2,OU=AccreditedCA,O=yessign,C=krNot Before18/07/2010, 15:00Not After19/07/2011, 14:59SubjectCN=AD79 Corp,OU=code-sign+OU=02201007190001,O=yessign,C=krExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
27:72Certificate
IssuerCN=KISA RootCA 1,OU=Korea Certification Authority Central,O=KISA,C=KRNot Before02/02/2007, 09:32Not After02/02/2017, 09:32SubjectCN=yessignTSA,OU=AccreditedCA,O=yessign,C=krExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
27:84Certificate
IssuerCN=KISA RootCA 1,OU=Korea Certification Authority Central,O=KISA,C=KRNot Before30/04/2010, 01:50Not After30/04/2020, 01:50SubjectCN=yessignCA General Class 2,OU=AccreditedCA,O=yessign,C=krKey Usages
KeyUsageCertSign
KeyUsageCRLSign
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ