Static task
static1
Behavioral task
behavioral1
Sample
bda8013a3b076a7c2fc133d2ce6b6b9c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bda8013a3b076a7c2fc133d2ce6b6b9c_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bda8013a3b076a7c2fc133d2ce6b6b9c_JaffaCakes118
-
Size
592KB
-
MD5
bda8013a3b076a7c2fc133d2ce6b6b9c
-
SHA1
95ed111957c7ce5fbddb38f10edd684cc63d3fb2
-
SHA256
58df823c7cb5467b0d50bf1d199f4057916c2443605433e61a031ab5ad1fc666
-
SHA512
d34ea717858f43aabddc930034802eb4d48201fadde1d59fe70ef577a4380e84f8b99ecf089ae62c3a85e7ba8bd9bb48adb0ecd384335bbbf7ec7a7c3daec195
-
SSDEEP
6144:FT4LkQaGJVNNJlCSUaSjH0jJ4gQdL6ZTEADf7LB3Ua22cjDKbZqDOBc1GSv5pT:FUw9GJVWS3IUjJ+L6ZrBEIcjWoOBc3j
Malware Config
Signatures
Files
-
bda8013a3b076a7c2fc133d2ce6b6b9c_JaffaCakes118.exe windows:5 windows x86 arch:x86
Code Sign
67:d4:8e:13:18:2d:f6:44:b1:a0:c3:a8:ad:ec:23:d9Certificate
IssuerCN=飞风追云Not Before31/12/2009, 16:00Not After31/12/2019, 16:00SubjectCN=飞风追云38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate
IssuerCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USNot Before15/06/2007, 00:00Not After14/06/2012, 23:59SubjectCN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate
IssuerCN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZANot Before04/12/2003, 00:00Not After03/12/2013, 23:59SubjectCN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 560KB - Virtual size: 54.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 21KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mackt Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.FeiYun Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE