Static task
static1
Behavioral task
behavioral1
Sample
db73025c0dc51706a45556b2256d44e8_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
db73025c0dc51706a45556b2256d44e8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
db73025c0dc51706a45556b2256d44e8_JaffaCakes118
-
Size
489KB
-
MD5
db73025c0dc51706a45556b2256d44e8
-
SHA1
d37eb22df3576b1e283f56a1ab2c57ca02d1f29f
-
SHA256
5fb0aaeeb3cd1ce2226cfa2ec0825f68cd890d0a755705450271c0248245338c
-
SHA512
939dc19af16f1097b886c821197cc857f3c8f7bfa3ee8eb063efdb5fffd3f67fa50990774c4ea860655cd22bc5d841d52af38907e6cbdd6229784b876ec73a35
-
SSDEEP
6144:dejU3Aj0RpNX2QbqvAnYZ2oCSfaz9lOQ3tRuDEwSMZHVWr+Plmw/SmeoFx:dqUQj0NXl+YFbbxLQ7ZHkrEm6x
Malware Config
Signatures
Files
-
db73025c0dc51706a45556b2256d44e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
067f898d6812693305f07f635b30de7b
Code Sign
01Certificate
IssuerCN=Booking HOTEL,O=Booking services corporation,C=FLNot Before07/01/2019, 10:54Not After07/01/2020, 10:54SubjectCN=Booking HOTEL,O=Booking services corporation,C=FL09:c0:fc:46:c8:04:42:13:b5:59:8b:af:28:4f:4e:41Certificate
IssuerCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before04/01/2017, 00:00Not After18/01/2028, 00:00SubjectCN=DigiCert SHA2 Timestamp Responder,O=DigiCert,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
0a:a1:25:d6:d6:32:1b:7e:41:e4:05:da:36:97:c2:15Certificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before07/01/2016, 12:00Not After07/01/2031, 12:00SubjectCN=DigiCert SHA2 Assured ID Timestamping CA,OU=www.digicert.com,O=DigiCert Inc,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
12:4a:b0:6c:f8:ec:1b:5d:b1:d1:c7:da:f1:cc:0b:fd:91:9c:e7:ff:18:93:96:87:b9:49:7e:14:db:ff:e3:d0Signer
Actual PE Digest12:4a:b0:6c:f8:ec:1b:5d:b1:d1:c7:da:f1:cc:0b:fd:91:9c:e7:ff:18:93:96:87:b9:49:7e:14:db:ff:e3:d0Digest Algorithmsha256PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord517
ord523
ord526
EVENT_SINK_AddRef
ord527
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ProcCallEngine
ord537
ord574
ord100
ord616
ord619
Sections
.text Size: 464KB - Virtual size: 460KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ