Static task
static1
Behavioral task
behavioral1
Sample
e9debc128b6e6f073d642f41d4425bca_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
e9debc128b6e6f073d642f41d4425bca_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e9debc128b6e6f073d642f41d4425bca_JaffaCakes118
-
Size
20KB
-
MD5
e9debc128b6e6f073d642f41d4425bca
-
SHA1
c7d7749a046222d14a407b628cb932dee2d8058c
-
SHA256
5ca37b3e632069dcc22f14a0921312d1e2b34ae8a02e612664e0cf0afb2cd7c7
-
SHA512
9268a4710d1eda2cb34c7348ed2a33ab496e4061fb6af1702c53a446691ae52b5c981e763f45a03ba64a0935a628731512644d6fe3713dfae3bcb9933a68f788
-
SSDEEP
192:8YjD0RA2+bY6ag4WpdslaedkLQKXU72M+c7nI0w9S0qs+ktASYspn:8gYRAdNCPiLQKE72j00XtAS
Malware Config
Signatures
Files
-
e9debc128b6e6f073d642f41d4425bca_JaffaCakes118.exe windows:4 windows x86 arch:x86
41ebb9d0daa0266fd3bf1eb024720ce8
Code Sign
6d:78:fe:61:64:5a:5c:68:bc:e0:e9:62:82:3d:17:12Certificate
IssuerCN=AwiqeqeqoaqaqawoNot Before01/03/2012, 10:55Not After31/12/2039, 23:59SubjectCN=Awiqeqeqoaqaqawo5a:57:b7:26:6c:9c:c9:c9:ac:bb:c5:df:11:f6:7f:48:b7:ea:47:1eSigner
Actual PE Digest5a:57:b7:26:6c:9c:c9:c9:ac:bb:c5:df:11:f6:7f:48:b7:ea:47:1eDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
ExitProcess
Sleep
user32
RegisterClassExA
ShowWindow
UpdateWindow
GetMessageA
EndPaint
DispatchMessageA
PostQuitMessage
gdi32
GetObjectA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 494B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 256B - Virtual size: 115B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 256B - Virtual size: 238B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ