Static task
static1
Behavioral task
behavioral1
Sample
41dc143f88042c62555f58c7c2ec794e_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
41dc143f88042c62555f58c7c2ec794e_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
41dc143f88042c62555f58c7c2ec794e_JaffaCakes118
-
Size
52KB
-
MD5
41dc143f88042c62555f58c7c2ec794e
-
SHA1
78abacf3f8d32cfdd59e200116d99e4981939cb1
-
SHA256
c5b33566d161ac4ae5bf19cc8521284f95c30fee6ccf4311ce345bf686d58372
-
SHA512
df2f255593ac6964d75a20a301a93853011aacba67d46dfee54db43d788bf725f9533936643dc451309c0581135a9d511c66999c681ee38adb7a60b0e1f2aa06
-
SSDEEP
768:bA9/bnRbPOK9YkrpYy75HO8xlqqBbTKZy6tQXynqwxHmJeVpCgiTdCin7u:c5RLOdkrt5uuAqBCZrCXyqwxbCiinC
Malware Config
Signatures
Files
-
41dc143f88042c62555f58c7c2ec794e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Code Sign
01Certificate
IssuerCN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6dNot Before01/08/1996, 00:00Not After31/12/2020, 23:59SubjectCN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6d0aCertificate
IssuerCN=Thawte Premium Server CA,OU=Certification Services Division,O=Thawte Consulting cc,L=Cape Town,ST=Western Cape,C=ZA,1.2.840.113549.1.9.1=#0c197072656d69756d2d736572766572407468617774652e636f6dNot Before06/08/2003, 00:00Not After05/08/2013, 23:59SubjectCN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZAExtended Key Usages
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
3f:3a:0eCertificate
IssuerCN=Thawte Code Signing CA,O=Thawte Consulting (Pty) Ltd.,C=ZANot Before22/04/2005, 09:32Not After22/04/2007, 09:32SubjectCN=Comforest SRL,OU=Secure Application Development,O=Comforest SRL,L=Galati,ST=Galati,C=ROExtended Key Usages
ExtKeyUsageCodeSigning
ExtKeyUsageMicrosoftCommercialCodeSigning
4b:49:a6:5e:b1:c7:a7:9c:f7:16:97:0f:e5:7a:4b:f3:40:31:9d:3eSigner
Actual PE Digest4b:49:a6:5e:b1:c7:a7:9c:f7:16:97:0f:e5:7a:4b:f3:40:31:9d:3eDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Sections
Size: - Virtual size: 112KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 43KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE