Static task
static1
Behavioral task
behavioral1
Sample
a31c2feb155691973c303dddc3a870e6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a31c2feb155691973c303dddc3a870e6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a31c2feb155691973c303dddc3a870e6_JaffaCakes118
-
Size
12KB
-
MD5
a31c2feb155691973c303dddc3a870e6
-
SHA1
1476aeea2fa787c28f88775206a3f63113240f2c
-
SHA256
e7a803a37fea5f6a81d87bc74c25847d79b952558069c04361d0118803b35d76
-
SHA512
ffca953b58ca71432833c04f19e594dc530cb4a4a5b9596c36bc8a7a377187f912d291320271ae67067beaa179fa4c8cc0f4522aa8540f4235b1afbd613d8d8a
-
SSDEEP
192:UpgM4P8qR8E9G2panL8K522Z4lxxZZ9Hve2N7V7uW0pIibwwhmTnNLhkKBj7B4n:UpkPttWngrcqde2N70IibwwkJhxBk
Malware Config
Signatures
Files
-
a31c2feb155691973c303dddc3a870e6_JaffaCakes118.exe windows:4 windows x86 arch:x86
Code Sign
11:af:28:14:42:7f:82:ba:46:04:40:ca:66:6c:74:95Certificate
IssuerCN=Qizhi Software (beijing) Co. LtdNot Before31/12/2007, 16:00Not After31/12/9998, 16:00SubjectCN=Qizhi Software (beijing) Co. Ltdd9:00:62:3f:5b:b9:3f:a4:0d:3e:d5:81:db:dd:f7:27:30:54:29:d8Signer
Actual PE Digestd9:00:62:3f:5b:b9:3f:a4:0d:3e:d5:81:db:dd:f7:27:30:54:29:d8Digest Algorithmsha1PE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.packed Size: - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.packed Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE