Static task
static1
Behavioral task
behavioral1
Sample
a0cb5004463ede877f9b78b305355eee_JaffaCakes118.exe
Resource
win7-20240705-en
General
-
Target
a0cb5004463ede877f9b78b305355eee_JaffaCakes118
-
Size
415KB
-
MD5
a0cb5004463ede877f9b78b305355eee
-
SHA1
910637fdd8ac64810876aca1d9e8603a35f7c4b8
-
SHA256
df4fcfd8b0bbf4f59b0e009758030f06baf464d28e403a1f8cd94b4a7a22daf3
-
SHA512
fe6a4f763fbe68def593deb0b12c9ba563c4e475caeb16f1fa6a83e6c8b88a00bf101e21d4c60583ee11586762bd4e46433dbe3e3211fe07b66a98c22a4ad526
-
SSDEEP
12288:UIyngRSqKg2DlfFGUiMdMM+f8DtN8IXtyX:UIygAqODlw8d68Df8EAX
Malware Config
Signatures
Files
-
a0cb5004463ede877f9b78b305355eee_JaffaCakes118.exe windows:4 windows x86 arch:x86
eeb19999a50c10e016c2b35ca8024d30
Code Sign
0e:25:c4:2b:db:55:c0:bc:4e:73:1a:8e:55:73:c8:c1Certificate
IssuerCN=alrewzwksfoNot Before14-11-2011 13:14Not After31-12-2039 23:59SubjectCN=Loren Comff:56:74:5b:13:84:d1:6f:da:b5:69:ae:fa:60:53:be:80:23:32:2dSigner
Actual PE Digestff:56:74:5b:13:84:d1:6f:da:b5:69:ae:fa:60:53:be:80:23:32:2dDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
GetDesktopWindow
ReleaseDC
ole32
OleDraw
oledlg
ord4
gdi32
SetBkColor
SetTextColor
msvcrt
_acmdln
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
exit
_XcptFilter
_exit
__getmainargs
kernel32
GetModuleHandleA
ExitProcess
VirtualAlloc
GetStringTypeA
GetStartupInfoA
OpenSemaphoreA
GetProcAddress
GetLocaleInfoA
VirtualProtectEx
GetNumberFormatA
GlobalMemoryStatus
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 990B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 290KB - Virtual size: 369KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aej Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ