Static task
static1
Behavioral task
behavioral1
Sample
a40cc07575785a0ccb2ef99aa8e694a8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a40cc07575785a0ccb2ef99aa8e694a8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a40cc07575785a0ccb2ef99aa8e694a8_JaffaCakes118
-
Size
2.3MB
-
MD5
a40cc07575785a0ccb2ef99aa8e694a8
-
SHA1
dd2d8abe2f63f710031e1fdc032f91fc2a5b6151
-
SHA256
ecce0204d940d807c0effdf84e5ec77385b9d12914356184108e6bf3f9aa4bf3
-
SHA512
38d19e68750eea97d3ee633df6b5c62c0840f9336a54170da79204eb28135debf55d0e7335fa0d0559c908ac66168146567f64d995e95f18fe6c3fd1801d5a8c
-
SSDEEP
49152:c6JZRtAoGYeM6rJtSaZXZHUCIxgWHs5LRUiqF0llfLXIct/xkzlj:RJBRCFtSaZhoqUR0TzXkzlj
Malware Config
Signatures
Files
-
a40cc07575785a0ccb2ef99aa8e694a8_JaffaCakes118.exe windows:5 windows x86 arch:x86
5e5aee77d6212bd5d98d1d915c25199f
Code Sign
Certificate
IssuerOU=Go Daddy Class 2 Certification Authority,O=The Go Daddy Group\, Inc.,C=USNot Before29-06-2004 17:06Not After29-06-2034 17:06SubjectOU=Go Daddy Class 2 Certification Authority,O=The Go Daddy Group\, Inc.,C=US03:01Certificate
IssuerOU=Go Daddy Class 2 Certification Authority,O=The Go Daddy Group\, Inc.,C=USNot Before16-11-2006 01:54Not After16-11-2026 01:54SubjectSERIALNUMBER=07969287,CN=Go Daddy Secure Certification Authority,OU=http://certificates.godaddy.com/repository,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=USKey Usages
KeyUsageCertSign
KeyUsageCRLSign
04:9b:f9:97:a2:47:25Certificate
IssuerSERIALNUMBER=07969287,CN=Go Daddy Secure Certification Authority,OU=http://certificates.godaddy.com/repository,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=USNot Before23-12-2010 19:58Not After23-12-2011 19:18SubjectCN=Gamevance LLC,OU=Gamevance LLC,O=Gamevance LLC,L=Irvine,ST=CA,C=USExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
HeapFree
GetProcessHeap
GetLastError
GetProcAddress
LoadLibraryA
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
Sleep
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
RtlUnwind
InitializeCriticalSectionAndSpinCount
VirtualAlloc
HeapReAlloc
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
user32
MessageBoxA
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ