Static task
static1
Behavioral task
behavioral1
Sample
fc98dc4c2844acae232617a8ac309508_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc98dc4c2844acae232617a8ac309508_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fc98dc4c2844acae232617a8ac309508_JaffaCakes118
-
Size
338KB
-
MD5
fc98dc4c2844acae232617a8ac309508
-
SHA1
ad0bc06fe5442def2d9383c921c7a2dc17f1f514
-
SHA256
f9a415a3151b2f7d10c1e4967f26e8d1f27d05ff4840b3dcc5d73f8628477999
-
SHA512
f6707eb83aef33b060adf3ec66f31d7ece7859dcc2e65bdaf4d1bb76af118ab7b4cde4152360f7e45b0b2d6c721ad4029f30b804526b612c233538c96d83fe69
-
SSDEEP
6144:i/na4SgZuoBOuTJRa2M8NNlpoKr80L6V7e9f44JyFaE+39VhLhiPmtxQ45Gph1:KnaHgZuoBOCJ4lkTpoKw7e9f44sF8VNq
Malware Config
Signatures
Files
-
fc98dc4c2844acae232617a8ac309508_JaffaCakes118.exe windows:1 windows x86 arch:x86
Code Sign
04Certificate
IssuerCN=KISA RootCA 1,OU=Korea Certification Authority Central,O=KISA,C=KRNot Before24/08/2005, 08:05Not After24/08/2025, 08:05SubjectCN=KISA RootCA 1,OU=Korea Certification Authority Central,O=KISA,C=KR03:f3Certificate
IssuerCN=yessignCA General Class 2,OU=AccreditedCA,O=yessign,C=krNot Before18/07/2010, 15:00Not After19/07/2011, 14:59SubjectCN=AD79 Corp,OU=code-sign+OU=02201007190001,O=yessign,C=krExtended Key Usages
ExtKeyUsageCodeSigning
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
27:72Certificate
IssuerCN=KISA RootCA 1,OU=Korea Certification Authority Central,O=KISA,C=KRNot Before02/02/2007, 09:32Not After02/02/2017, 09:32SubjectCN=yessignTSA,OU=AccreditedCA,O=yessign,C=krExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
27:84Certificate
IssuerCN=KISA RootCA 1,OU=Korea Certification Authority Central,O=KISA,C=KRNot Before30/04/2010, 01:50Not After30/04/2020, 01:50SubjectCN=yessignCA General Class 2,OU=AccreditedCA,O=yessign,C=krKey Usages
KeyUsageCertSign
KeyUsageCRLSign
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
CODE Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 588B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ