Static task
static1
Behavioral task
behavioral1
Sample
620843ea77bb124cf093de1c36e100e9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
620843ea77bb124cf093de1c36e100e9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
620843ea77bb124cf093de1c36e100e9_JaffaCakes118
-
Size
189KB
-
MD5
620843ea77bb124cf093de1c36e100e9
-
SHA1
8e58dc965d56db544dbb2dba8935f9b71f34c1e4
-
SHA256
e43665aa8ffc1c7dacd1a0f53a17920adaecf74ecbbd7127d141b5fea88d0ee3
-
SHA512
0a62c696ad97f2be5fcb8d3515dff748ee51f13f0a9eed0720018b4a4f1a499dd9dd4837290ff2585e8f6dcef162c28c5f524cbd27855f22a32f8968040eb183
-
SSDEEP
3072:vtyW/p4oYZq3O3nBe8atrPqJG8HwglGCNPzzj2zbrm5M0pwVkr8G8vCoCZUct/O9:1yW/p4o6q+raZPq08Hw3CZGm5M04kb8H
Malware Config
Signatures
Files
-
620843ea77bb124cf093de1c36e100e9_JaffaCakes118.exe windows:4 windows x86 arch:x86
4f059dbb55aaed321137036815f57416
Code Sign
75:01:9c:5e:55:ef:68:68:bc:ce:6b:7d:36:26:76:29Certificate
IssuerCN=Soonyou,1.2.840.113549.1.9.1=#0c0e536f6f6e796f754071712e636f6d,0.0=#1307536f6f6e796f75Not Before31/12/2007, 16:00Not After31/12/2107, 16:00SubjectCN=Soonyou,1.2.840.113549.1.9.1=#0c0e536f6f6e796f754071712e636f6d,0.0=#1307536f6f6e796f75c5:f8:24:a9:bd:dd:aa:bd:29:f9:20:e5:42:b7:b4:e7:6e:43:c5:69Signer
Actual PE Digestc5:f8:24:a9:bd:dd:aa:bd:29:f9:20:e5:42:b7:b4:e7:6e:43:c5:69Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
GetModuleFileNameA
ExitProcess
Exports
Exports
wo������祀�Κ�^��K��-%zDr�%���ѐn����B����n��/ׁ����q���9�Zd��SʇL/�0>�k T j1��Y|�2R��g��k;��W��~�ǝɢ}n��w=_��?�ʝ��m���E�KryG2��V��w�,�%���BB��eY��2�������;���lμ���S�E��8�`d��4���Dcg�L�PSi�KP�:��ti��2�)�)�S�\j�/��Q��7� N��0��c@x=v�����8�n�!0��ș~� ˑ��o3p�|��j����$�S ꊟA����R��bT���B�z^V:�.Lx�Z��q�� \+�9�ʩ��ü�nٙ_�)�;j)S�!�pY�e�sy��� �[4��{�ņ���$ߚtײ�����x�Hc���U�͌�8����hh]�B��-�D��n�⢥H�����>��މ��R�h�9Cr�m�B_b�JO3\vz�h!.#�-5Z?G�XB�4:{�d�y���+��7|�ׇ����f�$u�2��:�,>�}��̅�d��[��������*?U��e ��e��2*]�ϘZW>����3\_���+9�V�($��f�Ģћ�P�({U`�%�Żo�#]9Q���(��d��a؆*�5�Cu��ة��%�rF]��n��y h���L&4��ᦼڳ0$@��.@�M�#&���'B�U�Fp9�Mz�B�~�����F����@�Y��5����k6���� ��̠d-%�%m��6Ķ=wm�隃8\U��#�� �����a��H�HF>�P�X����w�-A��^��`9F�m�C���qAx�`�'U4��)�6��� ����W'w!E��[}��4�.=c���ц���`g�Î��O��?k�g��䛧���/�yUO%��d�OZ�-@� =kة;�\�U����S��6:���Í��s%T1�u�P��v��"��`����� s�c��� MSi<|����Z�՟50y�H�m�T��z�Y�[�n�M� �����H��k.�XIz�r�� �Jp��܈�y��� ����\ ,)� .��b����Q_��ӻnJ>\x� �ᓰ�kT�[���������6�3ꞯ�(R�d#�h����_�r�T��M���� �m 3��6�T"�7�@u�^��.N�:!6IhX�*���ɚ�0�y5M�##eɼ��Z �l���T���^����Fg�*} Q3��|�C5�5��>MY3�x���PV*���) I� �>��D�$�va��$������i#>3L� J�~�51����n;�D{K�-q"z���b���a�Ss��Y��9��{�kB�}��n�!��K��V Gc��*�D@q���_|6W@�`����Q�P�K3��J��>�l^�:����d_��./I�uX9>ہ���?��}�n���$�0�`~�6�%�ܣb4��+��taVr�u���c����i�V�"K)�m�Ѩ��m��}��2��l��2����� ���O��@�qA�~ӣ|DQIX����k�|��s�R�fX�a�@a���#�5� J��y�D�9}p^�@ {[���bQΙ6�rXM�2�w�5y'�������^�T���6]�ΞOUѲ�<�Qf�Ǟ�@R�(b������r�-�랣M�ܘ;���ʥÞ�+��,GϽ)����]���R t���,��DZ�A,�[nC�K�� �o��n��kt���:�Vϣ 91ʙ�;2��W����+���������V��8i����t�x��D��ͅҹQ8��'?@����Y� i���}DЃz�8��%D�(��kG�{��Bot8�� x��'���4f���'�� ƚ5�-S� /耥,��tD�vF��v혓eVZ=�?���ɴˮJ����(�(}��5����+*�O������O�T�&X=�y��~d��#�� �o%��B;Wm|�3(��|�u�������"U>iM'K����({�����*��$�ͫo�5��+;��LJ}�F��r�G]�����>�:�J�i�7�N�TN�8����!��A�{�w`��Af�D=�9����l[���k2X���å�T�D(�� *� Hd��{�x����T^`���3���a�ͅgTd�� ��#�<��c/Ec̻_����5ـ��� ��!$v���������˸�9����Ě(��iW��]��o�ڹ��Ʈ�k��mī�2 �Zc�i4"(���8 վ�*�� mIw,����������t��*�$_�pw�6�gW�ص͆���h3��_;���"��]�S�uD�R�r���\X$���Z~�8�E.��h���<�������p�6�^��O`M�o��g�����ܟ恐��g?1pώv?<���g"��T���l�� �:��@)��t��9�=��#VW)����d� m��m�CE����Ϫx1�腒:����P��v,�K�����e���^Jk�4o��}��}���1�0��.E�ob](y@�_p:�螒 ��l���X_/�oq9�:��W}��Wؽ�ve��R�'O]w�����-_�Q�0�'��V<{v`m 7��U˺�w������A� �VsĪ��A��4Ny�d֒Y<#�h���!������>R��!���;'�Ͳ|N6�0��9��d��y��f�#w7-c�{����3������Ei��:�{K6s�����"G��s���Q��ѝ����CA\o +#�=�R'Xր����Py���1ġ@]h��9��̱���V��Y�6�POBo zR����A�{"�X���i��hslì��/�F�4�;�����Z�S�\��$����%�3Uk¦�'H�<>3�Ɇ7NLJ���������͠3�f�轷0�pd��c-G��X��C����p��J����Ol�f�����Q����3h'�DZU������q�#I�"_K/`[���M���!i�O X6�����E���|u��;�@~��<�u&�4#�;�H[�"OZ����p��B)��j���w�<� � T�
Sections
=NopV^O[ Size: 512B - Virtual size: 228KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
[TSdfc@% Size: 131KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
M/rtIqa Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KK>cXjPI Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
qKQ5mM4< Size: 34KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_P$at)uH Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ