Static task
static1
Behavioral task
behavioral1
Sample
ace44d1bedcca2ca1470f53d9b66ee5f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ace44d1bedcca2ca1470f53d9b66ee5f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ace44d1bedcca2ca1470f53d9b66ee5f_JaffaCakes118
-
Size
18KB
-
MD5
ace44d1bedcca2ca1470f53d9b66ee5f
-
SHA1
08be51c57d70346eeacb44d1a4a6a86919550d70
-
SHA256
d103866d7284226a26c05329ef000949e49f01c30a4f2812e0bd6678e4829883
-
SHA512
29e5afd745df63b2eff1be6e464750cbb56e92039459d3e4ec316055caa8a1c5339fd9c8baae37103f3f62fe047685e4512e9dc3400a1c429361da25c595b865
-
SSDEEP
192:NnHU/GUQClWXWOtBbg4/1UuMS/esNxos7rM1eTpKitYYmbv7ttjRP4D9w0UP:NHtURlaBvM5szD812ppmbvZtu60U
Malware Config
Signatures
Files
-
ace44d1bedcca2ca1470f53d9b66ee5f_JaffaCakes118.exe windows:4 windows x86 arch:x86
844db254f32a9d78fbfff2591b7d4b58
Code Sign
69:12:d2:c5:7d:3e:8f:69:bf:f9:28:30:9d:7c:d5:a5Certificate
IssuerCN=AreaqaqeNot Before31/12/2010, 22:00Not After31/12/2039, 23:59SubjectCN=Areaqaqe66:24:01:33:b2:b7:ad:22:d4:ac:f7:88:4c:69:3e:fa:c5:36:5f:a5Signer
Actual PE Digest66:24:01:33:b2:b7:ad:22:d4:ac:f7:88:4c:69:3e:fa:c5:36:5f:a5Digest Algorithmsha1PE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetSystemDirectoryA
GetModuleHandleA
Sleep
GetLastError
GetCurrentProcess
GetCommandLineA
ExitProcess
LoadLibraryA
user32
KillTimer
LoadCursorA
LoadImageA
PostQuitMessage
RegisterClassExA
SetTimer
TranslateMessage
GetMessageA
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
BeginPaint
GetClientRect
gdi32
CreateCompatibleDC
DeleteDC
GetObjectA
SelectObject
BitBlt
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 812B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 332B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 256B - Virtual size: 162B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ