Static task
static1
Behavioral task
behavioral1
Sample
ee011e7a55fbd9778bcc54f429599d54_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ee011e7a55fbd9778bcc54f429599d54_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ee011e7a55fbd9778bcc54f429599d54_JaffaCakes118
-
Size
492KB
-
MD5
ee011e7a55fbd9778bcc54f429599d54
-
SHA1
997edd110ebf6457f1f7e9ba6cc774014bdbb590
-
SHA256
f283e715e969d8220a2d26333db1ef9451be07fd8aaef31efa3444a4e031d301
-
SHA512
5cb3905c50d5a79a2ad24425099431b2850f0a46f51e61ee3c0b4f2923558e93f1b3ec57acb5fb73144c59d46ab29ec026dfcf4cd0d98059a510dd5ac33f2eb7
-
SSDEEP
6144:KbsWm/0XepvZ2hg5y6QQTRw8j3oOTp1HSrrSkrJqHc:KbbepALwpTp2Trgc
Malware Config
Signatures
Files
-
ee011e7a55fbd9778bcc54f429599d54_JaffaCakes118.exe windows:4 windows x86 arch:x86
2b547f8bc05ea48c031a97dfd8bc2be4
Code Sign
01Certificate
IssuerCN=FE samples,O=Edition FOUND,C=FENot Before14-02-2019 17:30Not After14-02-2020 17:30SubjectCN=FE samples,O=Edition FOUND,C=FE4e:b0:87:8f:cc:24:35:36:b2:d8:c9:f7:bf:39:55:77Certificate
IssuerCN=UTN-USERFirst-Object,OU=http://www.usertrust.com,O=The USERTRUST Network,L=Salt Lake City,ST=UT,C=USNot Before31-12-2015 00:00Not After09-07-2019 18:40SubjectCN=COMODO SHA-256 Time Stamping Signer,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
ea:ca:31:a0:19:18:6d:a5:d5:ff:cd:ca:0e:f6:e4:8a:2c:6d:b7:a6:8b:04:fb:9c:de:b3:3d:6c:9a:d0:52:01Signer
Actual PE Digestea:ca:31:a0:19:18:6d:a5:d5:ff:cd:ca:0e:f6:e4:8a:2c:6d:b7:a6:8b:04:fb:9c:de:b3:3d:6c:9a:d0:52:01Digest Algorithmsha256PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvbvm60
MethCallEngine
ord525
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ProcCallEngine
ord100
ord617
ord650
ord546
Sections
.text Size: 476KB - Virtual size: 472KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ