Behavioral task
behavioral1
Sample
11a6b62f22e247e2a6fcf5d15e42c830_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
11a6b62f22e247e2a6fcf5d15e42c830_JaffaCakes118
-
Size
3.8MB
-
MD5
11a6b62f22e247e2a6fcf5d15e42c830
-
SHA1
b969e27e4570d309397d47baabb266b2ab1eed04
-
SHA256
6bf5f4826e8a08a51efd8c251af36a1730d57487a0e598dbd74b6fbe8a11d7ed
-
SHA512
c27f06368f4a68c89b378905bcdbd62f103eccc144d993a2e0b789ea602c67fe6389d6b155450b6de3facfd00944d166e4ac27eaf39c2ef99f87cf0a0a71f6f4
-
SSDEEP
49152:ZaY/cQwkAIl1yGpWDFYR0naO/RIaVj3mdoh:ZbcQl+Gy2R0aO/RHj3md0
Malware Config
Signatures
Files
-
11a6b62f22e247e2a6fcf5d15e42c830_JaffaCakes118.exe windows:4 windows x86 arch:x86
Code Sign
4b:2d:61:1e:29:b0:02:ad:44:e9:29:83:bc:7d:ce:fbCertificate
IssuerCN=Remax Mangine Series RPP-162Not Before10-08-2021 15:17Not After11-08-2031 15:17SubjectCN=Remax Mangine Series RPP-1628c:77:a0:00:8f:f4:d1:b0:c6:3d:9f:3a:48:83:8d:6bCertificate
IssuerCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBNot Before23-10-2020 00:00Not After22-01-2032 23:59SubjectCN=Sectigo RSA Time Stamping Signer #2,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageContentCommitment
30:0f:6f:ac:dd:66:98:74:7c:a9:46:36:a7:78:2d:b9Certificate
IssuerCN=USERTrust RSA Certification Authority,O=The USERTRUST Network,L=Jersey City,ST=New Jersey,C=USNot Before02-05-2019 00:00Not After18-01-2038 23:59SubjectCN=Sectigo RSA Time Stamping CA,O=Sectigo Limited,L=Salford,ST=Greater Manchester,C=GBExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
9b:a0:2c:39:3d:ec:b1:6d:ea:d5:fa:7b:92:6b:e9:22:f0:86:1e:b2:60:3b:2f:a8:86:a4:f9:97:91:01:4c:a2Signer
Actual PE Digest9b:a0:2c:39:3d:ec:b1:6d:ea:d5:fa:7b:92:6b:e9:22:f0:86:1e:b2:60:3b:2f:a8:86:a4:f9:97:91:01:4c:a2Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 193KB - Virtual size: 200KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 327KB - Virtual size: 999KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
┞ Quiz Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.themida Size: 3.1MB - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ