Static task
static1
Behavioral task
behavioral1
Sample
c972b594ecccf2b395bb27ede5c706c8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c972b594ecccf2b395bb27ede5c706c8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c972b594ecccf2b395bb27ede5c706c8_JaffaCakes118
-
Size
18KB
-
MD5
c972b594ecccf2b395bb27ede5c706c8
-
SHA1
f005378816f2efd5439a1f910437c0e61c699351
-
SHA256
ec3faa864cc3064633d545ced4825ff3afba540f460884fd38ed9fbc825137b7
-
SHA512
ee40ed447de86f036036c24d151f2a8b6a7aa53991dcabb8c9cfb21f552a216d5fd23243898079f412a557a43472390a6670c24421ffaf159ac97a31b72f0dbe
-
SSDEEP
384:NYUzt/D+uZCkqQvpJq3VU0xvvEvvvvvvnaWWm:NYUzt7+E+Qv3wxvvEvvvvvvas
Malware Config
Signatures
Files
-
c972b594ecccf2b395bb27ede5c706c8_JaffaCakes118.exe windows:4 windows x86 arch:x86
5fcb2f4d4bf22d7f8a7aacb4bccfa01c
Code Sign
25:0d:d3:17:94:ab:86:7e:b0:e0:c5:91:bb:ae:74:33Certificate
IssuerCN=AweroaaNot Before04/04/2012, 10:22Not After31/12/2039, 23:59SubjectCN=Aweroaa13:c1:04:ea:ec:4c:d6:1e:35:71:42:69:b2:d1:67:4d:07:18:b5:7dSigner
Actual PE Digest13:c1:04:ea:ec:4c:d6:1e:35:71:42:69:b2:d1:67:4d:07:18:b5:7dDigest Algorithmsha1PE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
Sleep
VirtualFree
GetVersion
user32
UpdateWindow
DispatchMessageA
ShowWindow
RegisterClassExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 380B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 149B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 274B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ