Static task
static1
Behavioral task
behavioral1
Sample
94904c3f3d146df0b3477cbb4221b3db_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
94904c3f3d146df0b3477cbb4221b3db_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
94904c3f3d146df0b3477cbb4221b3db_JaffaCakes118
-
Size
20KB
-
MD5
94904c3f3d146df0b3477cbb4221b3db
-
SHA1
e787a892048ac9786a16b6e9ca1cb408d75012c9
-
SHA256
fb115a4d718f408808d61a82c7ba5697f23ceeca10f03a173d863fe587b9f640
-
SHA512
1d508d405a8f13fed2f31ef341f0aba97acb751660bf8bb3b80121e530bafb1cc04efd4f9e1a0d2eb5dd9fda6f4b94982cf0f53ea2169aa9b3b13469c3b41d7b
-
SSDEEP
384:3XIiL3CAhgxt3J/EqeaqnPJfcI+A8KLjXtlg:3Q2Kt5MqezPJylKPc
Malware Config
Signatures
Files
-
94904c3f3d146df0b3477cbb4221b3db_JaffaCakes118.exe windows:4 windows x86 arch:x86
64898eb2b99d1e7ce54201c00b268640
Code Sign
5d:58:bd:3c:df:c7:2d:72:b3:86:d0:d8:b2:10:ad:90Certificate
IssuerCN=WiaaqoqNot Before30/01/2012, 11:57Not After31/12/2039, 23:59SubjectCN=Wiaaqoqff:3d:54:75:23:eb:29:32:93:5c:e5:73:af:ad:f0:1b:fc:35:22:3cSigner
Actual PE Digestff:3d:54:75:23:eb:29:32:93:5c:e5:73:af:ad:f0:1b:fc:35:22:3cDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
Sleep
GetProcAddress
VirtualFree
GetModuleHandleA
GetLastError
ExitProcess
VirtualAlloc
user32
KillTimer
LoadImageA
PostQuitMessage
RegisterClassExA
SetTimer
ShowWindow
TranslateMessage
UpdateWindow
GetClientRect
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
GetMessageA
gdi32
DeleteDC
GetObjectA
SelectObject
CreateCompatibleDC
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 768B - Virtual size: 758B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 43B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 256B - Virtual size: 166B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ