Static task
static1
Behavioral task
behavioral1
Sample
b6299d66614a2557f7f57f6669b7eb3b_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b6299d66614a2557f7f57f6669b7eb3b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b6299d66614a2557f7f57f6669b7eb3b_JaffaCakes118
-
Size
18KB
-
MD5
b6299d66614a2557f7f57f6669b7eb3b
-
SHA1
9b71241c577fab3acf5b93e52e51cec9cc6bbae6
-
SHA256
4b744b685bc825fbe42554bde932a7d9c0e38597f9c0a2e32fb8b7204159c4c5
-
SHA512
e0a8e0d5de7e05f5204b7f6a03c1f521db9fb89dd4d7e7fccaf736abcf86ccfa3a0403aa78f6ae1713d2127a83f139e2205a6b636d061714d3b77bc74bfa6936
-
SSDEEP
384:5ujb1v5Y7KUkjkZftisfEMJkmAKAesSm1sHh2J:AlFkZf3nMaDM
Malware Config
Signatures
Files
-
b6299d66614a2557f7f57f6669b7eb3b_JaffaCakes118.exe windows:4 windows x86 arch:x86
5fcb2f4d4bf22d7f8a7aacb4bccfa01c
Code Sign
7d:a6:a4:23:18:83:1c:46:b1:63:7c:20:66:63:94:1bCertificate
IssuerCN=RoaqaaqoqeNot Before09/04/2012, 09:52Not After31/12/2039, 23:59SubjectCN=Roaqaaqoqe54:32:83:a8:36:8f:b7:7e:5f:33:e0:af:20:32:19:12:75:d4:42:4bSigner
Actual PE Digest54:32:83:a8:36:8f:b7:7e:5f:33:e0:af:20:32:19:12:75:d4:42:4bDigest Algorithmsha1PE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
Sleep
VirtualFree
GetVersion
user32
UpdateWindow
DispatchMessageA
ShowWindow
RegisterClassExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 380B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 151B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ