Static task
static1
Behavioral task
behavioral1
Sample
783a8e85e70d6d5b23cf8b834f53e3fe_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
783a8e85e70d6d5b23cf8b834f53e3fe_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
783a8e85e70d6d5b23cf8b834f53e3fe_JaffaCakes118
-
Size
20KB
-
MD5
783a8e85e70d6d5b23cf8b834f53e3fe
-
SHA1
10ae774d1e4e87d8d1c5f7e595a34387d4369964
-
SHA256
459c909ce256e9f38db68af6ddace9cd38125760996654169cddbca7435c8a4e
-
SHA512
ee6fc18d731e001931ced2f93601486bcca66d4fb1fff2b06be0d5f28206789a3d0074b9056600e949e582210674aebc89e3dd86f1062a81f90ddb1dd6bbbf71
-
SSDEEP
192:Cen/kgLgugXYDIsFZRJ+z7YmXI6/PtlUc965h2HA4WuU40/Yqs+ktFsbcU:Cen/vLdwYsOuz7FxHpS27UX/mXtyw
Malware Config
Signatures
Files
-
783a8e85e70d6d5b23cf8b834f53e3fe_JaffaCakes118.exe windows:4 windows x86 arch:x86
6e0d50105d4543e23ceb54cd2867de84
Code Sign
1f:e0:33:7d:93:d3:23:6c:b6:09:4f:0d:80:19:d0:baCertificate
IssuerCN=EweriwariqaqNot Before02-02-2012 14:49Not After31-12-2039 23:59SubjectCN=Eweriwariqaqf5:7d:24:fd:d4:2e:0d:85:d8:5a:8f:6b:a7:d3:7a:f5:b8:a4:2c:fdSigner
Actual PE Digestf5:7d:24:fd:d4:2e:0d:85:d8:5a:8f:6b:a7:d3:7a:f5:b8:a4:2c:fdDigest Algorithmsha1PE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
Sleep
GetProcAddress
VirtualFree
GetModuleHandleA
GetLastError
ExitProcess
CreateThread
VirtualAlloc
user32
LoadImageA
PostQuitMessage
RegisterClassExA
SetTimer
ShowWindow
TranslateMessage
UpdateWindow
GetMessageA
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
GetClientRect
gdi32
DeleteDC
GetObjectA
SelectObject
CreateCompatibleDC
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 768B - Virtual size: 762B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 256B - Virtual size: 47B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 256B - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE