Static task
static1
Behavioral task
behavioral1
Sample
393f175d3782d4f6b1d215bd0f31a777_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
393f175d3782d4f6b1d215bd0f31a777_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
393f175d3782d4f6b1d215bd0f31a777_JaffaCakes118
-
Size
384KB
-
MD5
393f175d3782d4f6b1d215bd0f31a777
-
SHA1
e281722ebc73be5ecfca93b3395ba745ec354333
-
SHA256
d22df444e867fdf647f6757547b2b75968453c3bb398a5d94c5e17a5e57af7f6
-
SHA512
1e16c952065895a0a5529e3ceece00ffdc0cded95ff0cfcc5f98f2d0a9277f039f02f461b1564399613ba7c7580eaa9a7099b7c6778863adad156bb1acdeb160
-
SSDEEP
6144:PxNiNMIjSF7F8foeWlXeyCAabXiPAEnxNiNMIjSF7F0foeWlXeyCAabXVH:ZN2GF3hHfN2GFzh6
Malware Config
Signatures
Files
-
393f175d3782d4f6b1d215bd0f31a777_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Code Sign
0a:52:b6:22:21:80:f3:57:bb:2e:67:6b:8a:2e:ed:4eCertificate
IssuerCN=Microsoft CorporationNot Before02/03/2009, 07:00Not After12/08/2099, 07:00SubjectCN=Microsoft Corporation6f:3e:17:b1:8c:80:9d:d1:b7:fa:f9:a7:db:2a:f6:84:0f:93:93:7cSigner
Actual PE Digest6f:3e:17:b1:8c:80:9d:d1:b7:fa:f9:a7:db:2a:f6:84:0f:93:93:7cDigest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 205KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ