Static task
static1
Behavioral task
behavioral1
Sample
94888e67a93755c2722b80e2c94f3b99_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
94888e67a93755c2722b80e2c94f3b99_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
94888e67a93755c2722b80e2c94f3b99_JaffaCakes118
-
Size
2.3MB
-
MD5
94888e67a93755c2722b80e2c94f3b99
-
SHA1
85dc942a8314d1b7014f62c54e387441777ad1c7
-
SHA256
b4be9c81786ba94d2dfb4c415a3a61fa897313b82b163c7b31d576a0d67af4b0
-
SHA512
7027ac524a4af54bdfdef2814c21fb79a2357584647aa008292dc4e489fa38c27246781e946c4b90869962888b78da5f616554ed827bc471395c434d53664fd6
-
SSDEEP
49152:c6JZRtXoGYeM6rJtSaZXZHUCIxgWHs5LRUiqF0llfLXIct/xkzlB:RJBaCFtSaZhoqUR0TzXkzlB
Malware Config
Signatures
Files
-
94888e67a93755c2722b80e2c94f3b99_JaffaCakes118.exe windows:5 windows x86 arch:x86
5e5aee77d6212bd5d98d1d915c25199f
Code Sign
Certificate
IssuerOU=Go Daddy Class 2 Certification Authority,O=The Go Daddy Group\, Inc.,C=USNot Before29-06-2004 17:06Not After29-06-2034 17:06SubjectOU=Go Daddy Class 2 Certification Authority,O=The Go Daddy Group\, Inc.,C=US03:01Certificate
IssuerOU=Go Daddy Class 2 Certification Authority,O=The Go Daddy Group\, Inc.,C=USNot Before16-11-2006 01:54Not After16-11-2026 01:54SubjectSERIALNUMBER=07969287,CN=Go Daddy Secure Certification Authority,OU=http://certificates.godaddy.com/repository,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=USKey Usages
KeyUsageCertSign
KeyUsageCRLSign
04:9b:f9:97:a2:47:25Certificate
IssuerSERIALNUMBER=07969287,CN=Go Daddy Secure Certification Authority,OU=http://certificates.godaddy.com/repository,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=USNot Before23-12-2010 19:58Not After23-12-2011 19:18SubjectCN=Gamevance LLC,OU=Gamevance LLC,O=Gamevance LLC,L=Irvine,ST=CA,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
HeapFree
GetProcessHeap
GetLastError
GetProcAddress
LoadLibraryA
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
Sleep
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
RtlUnwind
InitializeCriticalSectionAndSpinCount
VirtualAlloc
HeapReAlloc
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
user32
MessageBoxA
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ