Static task
static1
Behavioral task
behavioral1
Sample
05b8e0df982613d5fb789cf7f615261f_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
05b8e0df982613d5fb789cf7f615261f_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
05b8e0df982613d5fb789cf7f615261f_JaffaCakes118
-
Size
36KB
-
MD5
05b8e0df982613d5fb789cf7f615261f
-
SHA1
030f7c40e69d6e730eb35af1a956a38738ccec5b
-
SHA256
9869cae560662e4a152f277db8c01ed4963dd1cc9f2f3767c0e78f79deae2e1e
-
SHA512
0a3f2df384b6e5e2d4def6da13569af2551bfdbfb502a47d32666933eae05cbd85bfaa9ec912991f122af9813a869957cfe6ac21d06e26a0822f3eb0043efe63
-
SSDEEP
768:rg7vg7SvB43wI9HYmC61oUsBRwfyjhTzdQr5BJ5U:EsmCgIXC61CBrlZQv7U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 05b8e0df982613d5fb789cf7f615261f_JaffaCakes118
Files
-
05b8e0df982613d5fb789cf7f615261f_JaffaCakes118.exe windows:5 windows x86 arch:x86
7b39d7219c7448dfd2f446c568ddcf1b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
crtdll
isupper
_vsnwprintf
_swab
_ultoa
_ltow
_mbslwr
is_wctype
strchr
_setsystime
_osminor_dll
strpbrk
exit
wcstok
_setjmp
_putw
strcmp
_flushall
cos
wcscmp
_chdir
_pclose
_access
__threadid
_logb
_stricoll
_local_unwind2
_findnext
_sys_nerr_dll
_putch
_chsize
_mbsnccnt
_fcvt
_wcsicoll
ispunct
_get_osfhandle
_purecall
putc
msvcp60
?_Isnan@?$_Ctr@N@std@@SA_NN@Z
?underflow@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEGXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
?do_encoding@?$codecvt@GDH@std@@MBEHXZ
?resetiosflags@std@@YA?AU?$_Smanip@H@1@H@Z
??4?$basic_iostream@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??Mstd@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
??1?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
?sync@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHXZ
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@G@Z
?pos_format@?$_Mpunct@G@std@@QBE?AUpattern@money_base@2@XZ
?do_thousands_sep@?$numpunct@D@std@@MBEDXZ
?sputbackc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??0?$moneypunct@D$00@std@@QAE@ABV_Locinfo@1@I@Z
?ends@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@1@AAV21@@Z
_FRteps
?pubsetbuf@?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEPAV12@PAGH@Z
?real@?$_Complex_base@M@std@@QBEMXZ
??_F?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAEXXZ
?sqrt@?$_Ctr@O@std@@SAOO@Z
?sungetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?setprecision@std@@YA?AU?$_Smanip@H@1@H@Z
?fail@ios_base@std@@QBE_NXZ
??_7overflow_error@std@@6B@
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAPAX@Z
??_7__non_rtti_object@std@@6B@
?pbackfail@?$basic_filebuf@GU?$char_traits@G@std@@@std@@MAEGG@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHIIABV12@@Z
?width@ios_base@std@@QBEHXZ
??4?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
user32
IsCharAlphaW
GetMenuStringA
OemToCharBuffA
EnumDesktopsA
SetRect
BuildReasonArray
VkKeyScanExW
GetClassInfoExA
CreateDialogParamA
GetPropW
IsChild
CharPrevA
CheckMenuItem
User32InitializeImmEntryTable
GetMessagePos
SetWindowsHookA
DefWindowProcW
LookupIconIdFromDirectoryEx
DdeGetData
IsWinEventHookInstalled
GetDesktopWindow
CountClipboardFormats
SetWindowsHookExA
ToAscii
ShowCursor
SetClassLongA
CreateDialogIndirectParamAorW
DestroyCursor
GetGuiResources
GetWindowRgnBox
FindWindowW
BeginDeferWindowPos
RegisterRawInputDevices
DdeReconnect
TrackPopupMenu
GetDlgItemTextW
FindWindowA
SetWindowPos
GetKeyNameTextW
ValidateRgn
DragDetect
LoadCursorFromFileA
MapVirtualKeyA
msvcrt
__set_app_type
__p__commode
__getmainargs
exit
kernel32
GetVersion
GetSystemDefaultLangID
GetProcessHeaps
SetLocaleInfoW
CommConfigDialogA
CreateWaitableTimerA
BaseCheckAppcompatCache
FindNextVolumeA
ShowConsoleCursor
IsDebuggerPresent
SetConsoleCursor
ConvertDefaultLocale
SetLocaleInfoA
EnumSystemCodePagesW
GetConsoleAliasExesLengthW
EnterCriticalSection
VerifyVersionInfoW
IsValidCodePage
FindNextVolumeMountPointA
GetVersionExA
SetLastConsoleEventActive
GetLogicalDriveStringsW
ReadProcessMemory
IsValidLocale
OpenJobObjectW
LZRead
HeapQueryInformation
CreateJobObjectA
RequestWakeupLatency
LoadLibraryA
DeviceIoControl
OpenFileMappingW
LeaveCriticalSection
SetTapePosition
VirtualAlloc
RtlFillMemory
CreateEventW
TerminateJobObject
SetMailslotInfo
CreateTimerQueue
CreateFileA
GlobalGetAtomNameW
EnumResourceLanguagesA
WriteConsoleOutputCharacterA
GetSystemDefaultLCID
GetUserDefaultLCID
GetModuleHandleExW
SetConsoleActiveScreenBuffer
UTRegister
MoveFileWithProgressW
SetComputerNameExA
secur32
SetContextAttributesW
CredUnmarshalTargetInfo
GetUserNameExA
MakeSignature
QueryContextAttributesW
InitializeSecurityContextW
InitSecurityInterfaceW
LsaDeregisterLogonProcess
SetContextAttributesA
SaslInitializeSecurityContextW
EnumerateSecurityPackagesW
LsaUnregisterPolicyChangeNotification
SealMessage
DeleteSecurityPackageW
SaslIdentifyPackageW
SaslGetProfilePackageW
DeleteSecurityPackageA
AcquireCredentialsHandleW
InitializeSecurityContextA
ExportSecurityContext
SecpTranslateNameEx
DeleteSecurityContext
DecryptMessage
ApplyControlToken
CredMarshalTargetInfo
LsaConnectUntrusted
SaslIdentifyPackageA
CompleteAuthToken
LsaGetLogonSessionData
QuerySecurityContextToken
LsaRegisterPolicyChangeNotification
QuerySecurityPackageInfoW
QueryContextAttributesA
QuerySecurityPackageInfoA
SaslInitializeSecurityContextA
RevertSecurityContext
QueryCredentialsAttributesA
LsaLookupAuthenticationPackage
SecpFreeMemory
SaslAcceptSecurityContext
lz32
LZDone
LZInit
GetExpandedNameA
LZSeek
LZStart
LZRead
LZOpenFileW
GetExpandedNameW
LZClose
LZOpenFileA
CopyLZFile
LZCopy
LZCloseFile
LZCreateFileW
Sections
.text Size: 165KB - Virtual size: 165KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 535KB - Virtual size: 535KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 165KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ