Static task
static1
Behavioral task
behavioral1
Sample
fe9cb3e4dd1a2e58f55fc914c969e37e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fe9cb3e4dd1a2e58f55fc914c969e37e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fe9cb3e4dd1a2e58f55fc914c969e37e_JaffaCakes118
-
Size
329KB
-
MD5
fe9cb3e4dd1a2e58f55fc914c969e37e
-
SHA1
77e6ce41bda4411eacf43b870fed0cec5f0b4c53
-
SHA256
066bc4fcb00bcc63400cac07744bbce5de4ee231e2764d3c6907f50fa79b85b9
-
SHA512
2fd11621776b9651539604a4d720242d4216f603412aa9e205794fecbad0904b38faef78216f52acda88a17acb1ac54f7e6705a1080bb6458e5fe90bc4706bf4
-
SSDEEP
6144:IvHF4eZQdudR7td35FiTM+Bx64kX3oXHm3/DpYmFfi+O9q9dr/a:IvH9Zsuf7t3MkA2DpPiZaxi
Malware Config
Signatures
Files
-
fe9cb3e4dd1a2e58f55fc914c969e37e_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
6c:7c:17:23:38:1a:15:a4:41:61:85:1a:89:4b:f5:45Certificate
IssuerCN=SmartFTP ClientNot Before02/01/2014, 12:56Not After02/01/2114, 12:56SubjectCN=SmartFTP Client65:c4:73:e7:13:64:99:6f:58:94:a4:c9:8e:d2:4b:10:5a:5a:ca:44Signer
Actual PE Digest65:c4:73:e7:13:64:99:6f:58:94:a4:c9:8e:d2:4b:10:5a:5a:ca:44Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 320KB - Virtual size: 319KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ