Static task
static1
Behavioral task
behavioral1
Sample
f7b57a8f400c6b9ed0be0063b2d669b1_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
f7b57a8f400c6b9ed0be0063b2d669b1_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f7b57a8f400c6b9ed0be0063b2d669b1_JaffaCakes118
-
Size
120KB
-
MD5
f7b57a8f400c6b9ed0be0063b2d669b1
-
SHA1
45cd19f2463a35e2e89c38cbe72593ff9291499e
-
SHA256
ad289c3a177e757e54c924ab39475d1a8e9da9695d2d8640b79f48ce7f68027a
-
SHA512
7932d45ab6ab809361df254f670acef35f20855af559316e0807a05e8bc23f8f228eddc2b513e06755495bf9e94ba6b19c61d1b0c9b9b3fec5280b233b32e3d2
-
SSDEEP
3072:NBXsQdqjOt14bKhIAsdxn6sM0TZMl9VJdzh5vaBAzmeu2ZNb:vXsG14ehIAsdxn6sM0TZMl9VJdzh5vaS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f7b57a8f400c6b9ed0be0063b2d669b1_JaffaCakes118
Files
-
f7b57a8f400c6b9ed0be0063b2d669b1_JaffaCakes118.exe windows:4 windows x86 arch:x86
f8f49007103a7ad79cf83b30c67d11bd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
GetSystemDirectoryA
lstrlenA
GetVersionExA
Sleep
CreateFileA
MultiByteToWideChar
GetStartupInfoA
FindFirstFileA
DeleteFileA
FindNextFileA
FindClose
CreateDirectoryA
CopyFileA
SetFileAttributesA
GetModuleHandleA
GetModuleFileNameA
CloseHandle
MoveFileA
GetCurrentDirectoryA
WriteFile
user32
GetWindow
GetWindowRect
LoadIconA
GetClassNameA
GetIconInfo
GetDesktopWindow
ShowCursor
IsWindowVisible
SetForegroundWindow
SetActiveWindow
GetCursorPos
SetCursorPos
mouse_event
gdi32
CreateCompatibleDC
GetDIBits
DeleteDC
DeleteObject
GetObjectA
advapi32
RegDeleteValueA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
shell32
SHGetSpecialFolderPathA
ole32
CoInitialize
CoCreateInstance
CoUninitialize
wininet
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile
msvcrt
??3@YAXPAX@Z
_beginthread
??2@YAPAXI@Z
_stricmp
sprintf
strrchr
fclose
fprintf
fopen
strstr
fwrite
printf
free
malloc
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__CxxFrameHandler
msvcp60
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Xlen@std@@YAXXZ
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?capacity@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?copy@?$char_traits@D@std@@SAPADPADPBDI@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
netapi32
Netbios
Sections
.text Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ