Static task
static1
Behavioral task
behavioral1
Sample
5a303f1b5a762ff423f4d181409ef1b0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5a303f1b5a762ff423f4d181409ef1b0_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5a303f1b5a762ff423f4d181409ef1b0_JaffaCakes118
-
Size
414KB
-
MD5
5a303f1b5a762ff423f4d181409ef1b0
-
SHA1
24acf4ea9b0ef17d3843b1136be454dec99fdd17
-
SHA256
34d44d30abab5a31f204ec8e2b62fc6a18c869b80c7436685a0bb56542ae38fc
-
SHA512
f14dbc5352a6f04ac15de29b683623ab582bf98b9af35013318d6c4216447c2c0e05df4be356d5bf08014a8b9d7f90ce08c1c31c29da35670a31688d5acc0dda
-
SSDEEP
12288:8l2EvlgBBo3Ctbyes9rahqpho0k3kvM8n0:8l5v2BBgrpq6hgyL0
Malware Config
Signatures
Files
-
5a303f1b5a762ff423f4d181409ef1b0_JaffaCakes118.exe windows:4 windows x86 arch:x86
0b6026b929eb8b7c4733ea0d7678e77d
Code Sign
f2:76:e0:04:a0:71:a1:4e:7b:94:a8:17:7a:ef:bbCertificate
IssuerCN=cerajthslkwNot Before14/11/2011, 13:15Not After31/12/2039, 23:59SubjectCN=Loren Comcf:39:0b:5c:03:53:80:f6:04:55:bc:b5:12:27:f5:8c:87:97:11:a8Signer
Actual PE Digestcf:39:0b:5c:03:53:80:f6:04:55:bc:b5:12:27:f5:8c:87:97:11:a8Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
GetDesktopWindow
ReleaseDC
ole32
OleDraw
oledlg
ord4
gdi32
SetBkColor
SetTextColor
msvcrt
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__setusermatherr
kernel32
GetModuleHandleA
ExitProcess
SetLocaleInfoA
CreateMutexA
GetStartupInfoA
IsBadWritePtr
GetProcAddress
GetStringTypeW
GetUserDefaultLCID
SetEvent
OpenEventA
GetSystemDefaultLCID
GetOEMCP
LeaveCriticalSection
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 278KB - Virtual size: 358KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ifxbxw Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ