Static task
static1
Behavioral task
behavioral1
Sample
752792ea15719843ad02dd934ca1ca5a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
752792ea15719843ad02dd934ca1ca5a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
752792ea15719843ad02dd934ca1ca5a_JaffaCakes118
-
Size
4.4MB
-
MD5
752792ea15719843ad02dd934ca1ca5a
-
SHA1
9c1f88bda900c9fd0f8ffd4baceb69fa9c8bad30
-
SHA256
be6bc6e73f1477d4bd173f131d51d6059bae1740dbed79f3d63688f4af0784b1
-
SHA512
d64b4d9333b6356a02ba322b6c322fd86eb642015d445077a2b5baa89d5ca2badd1b4735e5d53620c80482b583a0d9a51592b18aec37d7bebb9cc186291c444b
-
SSDEEP
98304:NrquT4lOUDEatPU9xUL/PX7jpvsz64qUopE1gxGKORnhFOYW:NrvElOkvUon/azHqzpE1gQKOi
Malware Config
Signatures
Files
-
752792ea15719843ad02dd934ca1ca5a_JaffaCakes118.exe windows:5 windows x86 arch:x86
14314a2a561f3c740022851a022f21a4
Code Sign
08:5b:80:24:5b:90:21:71:26:81:4e:2f:eb:ec:46:4cCertificate
IssuerPOSTALCODE=10061Not Before05-08-2021 22:27Not After05-08-2022 22:27SubjectPOSTALCODE=100610b:1a:0b:c2:88:88:c0:03:28:9c:6e:01:e2:0e:f7:60:22:86:eb:39:9f:59:f0:3f:d6:3c:96:14:5a:03:1b:d8Signer
Actual PE Digest0b:1a:0b:c2:88:88:c0:03:28:9c:6e:01:e2:0e:f7:60:22:86:eb:39:9f:59:f0:3f:d6:3c:96:14:5a:03:1b:d8Digest Algorithmsha256PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
C:\vedowudisihay\povegayoramafi4-dekefecep\kimekey bahosago.pdb
Imports
kernel32
GetComputerNameA
SetProcessAffinityMask
CreateFileA
GlobalDeleteAtom
WriteConsoleOutputCharacterW
lstrlenA
GetConsoleAliasesLengthW
EnumDateFormatsExW
BuildCommDCBAndTimeoutsA
UpdateResourceA
EndUpdateResourceW
GetCurrentProcess
GetUserDefaultLCID
WaitForSingleObject
WriteConsoleInputA
SetEvent
GetSystemDefaultLCID
GetModuleHandleW
ReadConsoleW
SetFileTime
WriteFile
CreateActCtxW
InitializeCriticalSection
ActivateActCtx
GetConsoleCP
GlobalFindAtomA
LoadLibraryW
TerminateThread
ReadConsoleInputA
CopyFileW
GetSystemWindowsDirectoryA
ReadConsoleOutputW
GetVersionExW
InterlockedPopEntrySList
DnsHostnameToComputerNameW
GetConsoleAliasW
SetConsoleCursorPosition
VerifyVersionInfoA
CreateActCtxA
SetConsoleTitleA
GetConsoleOutputCP
GetLongPathNameW
SetLastError
GetProcAddress
VerLanguageNameA
GetConsoleDisplayMode
EnterCriticalSection
GetDiskFreeSpaceW
LoadLibraryA
WriteConsoleA
InterlockedExchangeAdd
DeleteTimerQueue
CreateTapePartition
GetProfileStringA
BuildCommDCBA
VirtualProtect
GetFileAttributesExW
GetCPInfoExA
FindFirstVolumeA
GetPrivateProfileSectionW
GetSystemTime
AreFileApisANSI
CreateThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
HeapReAlloc
HeapAlloc
GetStartupInfoW
RaiseException
RtlUnwind
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameA
TerminateProcess
IsDebuggerPresent
HeapFree
DeleteCriticalSection
LeaveCriticalSection
HeapCreate
VirtualFree
VirtualAlloc
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
user32
GetAltTabInfoA
RealChildWindowFromPoint
Sections
.text Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 40.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ