Static task
static1
Behavioral task
behavioral1
Sample
dc84a394feff8f3a9ca80ae9b64a42cd_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dc84a394feff8f3a9ca80ae9b64a42cd_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dc84a394feff8f3a9ca80ae9b64a42cd_JaffaCakes118
-
Size
2.4MB
-
MD5
dc84a394feff8f3a9ca80ae9b64a42cd
-
SHA1
8e7212e0e60911b8cb7e4fb738c660844f746674
-
SHA256
ad37a5ab12f316c223daaa2dc4067effdee681e05c7bbe4f485b151dca4bfbc7
-
SHA512
d756c68905e5cbaa09a93226d2a5362cf4efade186fbe35da6375afed3b0a59c9fe58f2d8069b1fb0d0945b35119633c8b4023d57510645dfd529ad7d3429a4d
-
SSDEEP
49152:ZQAKl4flABy1fk75BaaBwb78pWWMjDyLjcQGVmvCxEJ73ENG:Zelkky1MeGwb783MjDykFXNG
Malware Config
Signatures
Files
-
dc84a394feff8f3a9ca80ae9b64a42cd_JaffaCakes118.exe windows:1 windows x86 arch:x86
Code Sign
45:12:14:d2:a0:5e:23:9a:42:2e:64:1b:2a:0d:ee:d6Certificate
IssuerCN=胡建华Not Before09/06/2005, 09:52Not After31/05/2006, 16:00SubjectCN=胡建华db:5a:3e:5c:2b:fa:05:b6:23:a0:ff:8d:ee:a8:44:9b:b1:48:f6:dbSigner
Actual PE Digestdb:5a:3e:5c:2b:fa:05:b6:23:a0:ff:8d:ee:a8:44:9b:b1:48:f6:dbDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 580B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 159KB - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ