Static task
static1
Behavioral task
behavioral1
Sample
5ba25701153c089f7504e14daa0904f3_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
5ba25701153c089f7504e14daa0904f3_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5ba25701153c089f7504e14daa0904f3_JaffaCakes118
-
Size
100KB
-
MD5
5ba25701153c089f7504e14daa0904f3
-
SHA1
d8bf3d2029ecc537dc9c62b14ace597dd236f60c
-
SHA256
2e328509d811e64877dd10817b262324aecdfc1695aab22d284f5bc86e7a04f9
-
SHA512
bfd2f4339aed9992536b9c156584eab414ad526107b7fe4eeaeb8d0933a366a83d69f0d54c7900a9506978a38bd410479fbb44e875142591f48c891b7c5cfd6b
-
SSDEEP
3072:c2vd9vu/RqnEkg1Qzi9CTExX0zRorN3bAohP7:ccdg/REzeORURAohj
Malware Config
Signatures
Files
-
5ba25701153c089f7504e14daa0904f3_JaffaCakes118.exe windows:4 windows x86 arch:x86
9bbf1559bee8f5add3d62c4c1098537f
Code Sign
75:01:9c:5e:55:ef:68:68:bc:ce:6b:7d:36:26:76:29Certificate
IssuerCN=Soonyou,1.2.840.113549.1.9.1=#0c0e536f6f6e796f754071712e636f6d,0.0=#1307536f6f6e796f75Not Before31/12/2007, 16:00Not After31/12/2107, 16:00SubjectCN=Soonyou,1.2.840.113549.1.9.1=#0c0e536f6f6e796f754071712e636f6d,0.0=#1307536f6f6e796f7563:1b:d4:59:e0:c5:2f:2d:68:07:90:9d:9f:9e:b0:06:21:1d:54:3bSigner
Actual PE Digest63:1b:d4:59:e0:c5:2f:2d:68:07:90:9d:9f:9e:b0:06:21:1d:54:3bDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SizeofResource
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
advapi32
ControlService
msvcrt
strlen
user32
MessageBoxA
Sections
.text Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vx20 Size: - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE
.vx21 Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ