Static task
static1
Behavioral task
behavioral1
Sample
06c890762b619f9f8844ff94a12ff94e_JaffaCakes118.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
06c890762b619f9f8844ff94a12ff94e_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
06c890762b619f9f8844ff94a12ff94e_JaffaCakes118
-
Size
121KB
-
MD5
06c890762b619f9f8844ff94a12ff94e
-
SHA1
b9a5ef812fefac928be8531db2e14cc84c0a3fab
-
SHA256
d8f73f99917b0d674886f86eef3dcac6ec6623f241984c6aacf47449b3de126c
-
SHA512
5e5dc73ddf52373e630321dc1a305c49fa0a7b6bb315de3fc527fe36ea305f4776114fc9975c305cd05a56d9a3a6bd05a08c72a0e6d35fad8fcac55faa618442
-
SSDEEP
1536:h0Yy0c+t6qSgz6XFPvzxkJ0PjJ0SSwV0L9G+wbNEe2j3VAPQD+WDaEPG:OzL+t6FgmVPvbeJxe2jFAoDaEPG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06c890762b619f9f8844ff94a12ff94e_JaffaCakes118
Files
-
06c890762b619f9f8844ff94a12ff94e_JaffaCakes118.exe windows:4 windows x86 arch:x86
408f04c967c3255fc137c66eae79c9fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
libantiprism-0
_Z11read_doublePKcPdPc
_Z20line_plane_intersect5vec3dS_S_S_Pid
_Z20lines_nearest_points5vec3dS_S_S_RS_S0_d
_Z8centroidRKSt6vectorI5vec3dSaIS0_EERKS_IiSaIiEE
_Z9face_normRKSt6vectorI5vec3dSaIS0_EERKS_IiSaIiEEb
_Z9make_edgeii
_ZN10col_geom_v12delete_edgesERKSt6vectorIiSaIiEEPSt3mapIiiSt4lessIiESaISt4pairIKiiEEE
_ZN10col_geom_v12delete_facesERKSt6vectorIiSaIiEEPSt3mapIiiSt4lessIiESaISt4pairIKiiEEE
_ZN10col_geom_v12delete_vertsERKSt6vectorIiSaIiEEPSt3mapIiiSt4lessIiESaISt4pairIKiiEEE
_ZN10col_geom_v22add_missing_impl_edgesEv
_ZN10col_geom_v6appendERK7geom_if
_ZN10col_geom_v9color_vefE7col_valS0_S0_
_ZN12ultra_getopt11ultragetoptEiPKPcPKc
_ZN12ultra_getoptC2Ev
_ZN5vec3d5unsetEv
_ZN7col_val9invisibleE
_ZN7geom_if11clear_edgesEv
_ZN7geom_if11clear_facesEv
_ZN7geom_if11clear_vertsEv
_ZN7geom_if11delete_vertEiPSt3mapIiiSt4lessIiESaISt4pairIKiiEEE
_ZN7geom_if12add_edge_rawERKSt6vectorIiSaIiEE
_ZN7geom_if12delete_edgesERKSt6vectorIiSaIiEEPSt3mapIiiSt4lessIiESaISt4pairIKiiEEE
_ZN7geom_if12delete_facesERKSt6vectorIiSaIiEEPSt3mapIiiSt4lessIiESaISt4pairIKiiEEE
_ZN7geom_if12delete_vertsERKSt6vectorIiSaIiEEPSt3mapIiiSt4lessIiESaISt4pairIKiiEEE
_ZN7geom_if13add_edges_rawERKSt6vectorIS0_IiSaIiEESaIS2_EE
_ZN7geom_if13read_resourceESsPc
_ZN7geom_if22add_missing_impl_edgesEv
_ZN7geom_if4readEP6_iobufPc
_ZN7geom_if4readESsPc
_ZN7geom_if6appendERKS_
_ZN7geom_if8add_edgeESt6vectorIiSaIiEE
_ZN7geom_if8add_edgeEii
_ZN7geom_if8add_faceERKSt6vectorIiSaIiEE
_ZN7geom_if8add_faceEiz
_ZN7geom_if8add_vertE5vec3d
_ZN7geom_if9add_edgesERKSt6vectorIS0_IiSaIiEESaIS2_EE
_ZN7geom_if9add_facesERKSt6vectorIS0_IiSaIiEESaIS2_EE
_ZN7geom_if9add_vertsERKSt6vectorI5vec3dSaIS1_EE
_ZN7geom_if9clear_allEv
_ZN7polygon11add_polygonER7geom_ifd
_ZN7polygon11set_subtypeEiPc
_ZN7polygon9make_polyER7geom_if
_ZN7sch_symC1EiiRK5mat3dPc
_ZN9geom_info15find_vert_normsEb
_ZN9prog_opts11common_optsEcc
_ZN9prog_opts13help_ver_textE
_ZN9prog_opts16handle_long_optsEiPPc
_ZNK7geom_if10write_crdsEP6_iobufPKci
_ZNK7geom_if10write_crdsESsPcPKci
_ZNK7geom_if19get_edge_face_pairsERSt3mapISt6vectorIiSaIiEES3_St4lessIS3_ESaISt4pairIKS3_S3_EEEb
_ZNK7geom_if5writeEP6_iobufi
_ZNK7geom_if5writeESsPci
_ZNK9prog_opts7messageESsPKcSs
_ZTV11e_distances
_ZTV11f_distances
_ZTV11v_distances
_ZTV12ie_distances
_ZN9prog_opts13help_ver_textE
_ZTV11v_distances
_ZTV11e_distances
_ZTV12ie_distances
_ZTV11f_distances
_ZN7col_val9invisibleE
_ZN7col_val9invisibleE
_ZN7col_val9invisibleE
_ZN7col_val9invisibleE
kernel32
CreateSemaphoreA
ExitProcess
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject
msvcrt
_write
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
exit
fprintf
fputc
fputs
free
fwrite
malloc
memchr
memcpy
memmove
memset
realloc
signal
sqrt
strcat
strcmp
strcpy
strlen
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 88B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE