Static task
static1
Behavioral task
behavioral1
Sample
0e61ee249b973bc6af31edabfe1ee498_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0e61ee249b973bc6af31edabfe1ee498_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0e61ee249b973bc6af31edabfe1ee498_JaffaCakes118
-
Size
38KB
-
MD5
0e61ee249b973bc6af31edabfe1ee498
-
SHA1
66da49fbfbb8251ec6ba43ab0387329cc1fe2c2f
-
SHA256
85126374df79d63d3036b9894b8a199e5987d97b7e4e2c965c53be9540fac3de
-
SHA512
d74d4584ffd03e8d35660da577ecf5df8008170dab81a62eb756e4f248fbe01c0b1147982fd3ad94d388697fe48b6d1598b3558e1b25c8ec10d758f28f5f9a53
-
SSDEEP
768:QM0JHTIYNteKOw6YsUJ9m+bTsmFIFT3T1UHuO6ff4eFZj:QM0xs8F1cyF0FRVZj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e61ee249b973bc6af31edabfe1ee498_JaffaCakes118
Files
-
0e61ee249b973bc6af31edabfe1ee498_JaffaCakes118.exe windows:5 windows x86 arch:x86
b3bea301d8d0fe43cca1c1f7dfbbfa7a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcp60
?rfind@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
??_8?$basic_fstream@GU?$char_traits@G@std@@@std@@7B?$basic_istream@GU?$char_traits@G@std@@@1@@
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADPAD0@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
??4overflow_error@std@@QAEAAV01@ABV01@@Z
?open@?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAEPAV12@PBDH@Z
??4?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
??Gstd@@YA?AV?$complex@M@0@ABV10@0@Z
?do_neg_format@?$_Mpunct@G@std@@MBE?AUpattern@money_base@2@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
??0?$collate@G@std@@QAE@I@Z
?negative_sign@?$_Mpunct@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIIG@Z
?pbackfail@?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@MAEGG@Z
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBG0@Z
??4?$_Complex_base@O@std@@QAEAAV01@ABV01@@Z
?imag@?$_Complex_base@N@std@@QBENXZ
??_F?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
_LDtest
??1?$codecvt@DDH@std@@UAE@XZ
towctrans
?always_noconv@codecvt_base@std@@QBE_NXZ
?find@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIPBGI@Z
?pbackfail@?$basic_filebuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?_Fpz@std@@3_JB
?do_thousands_sep@?$numpunct@G@std@@MBEGXZ
?close@?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAEXXZ
??_F?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@N@Z
??_7?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
??Hstd@@YA?AV?$complex@N@0@ABV10@0@Z
?_Addcats@_Locinfo@std@@QAEAAV12@HPBD@Z
?infinity@?$numeric_limits@K@std@@SAKXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?round_error@?$numeric_limits@G@std@@SAGXZ
??_F?$collate@G@std@@QAEXXZ
?frac_digits@?$_Mpunct@G@std@@QBEHXZ
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAC@Z
?decimal_point@?$_Mpunct@G@std@@QBEGXZ
opengl32
glOrtho
glRasterPos4i
glTexGeni
wglSwapLayerBuffers
glRasterPos3f
glGetPixelMapuiv
glIndexub
glColorPointer
glPolygonStipple
glTexCoord4d
glTexEnvfv
glMapGrid1d
glTexCoord3i
glNormal3dv
glClear
glAccum
glRectd
glBegin
glGetError
glColor4bv
glMaterialf
glIndexMask
glColor3us
glTexParameteriv
glClearColor
glFinish
glDisable
glColor4dv
glIndexPointer
glColor4sv
glIsList
glNormal3d
glTranslatef
glTexImage2D
glTexCoord4fv
glColor4i
glGetTexParameteriv
glRasterPos4s
glTranslated
glMap2d
oleaut32
VarUI2FromDisp
VarR8FromBool
OleTranslateColor
SafeArrayCreate
VarParseNumFromStr
VarR8FromI1
VarI2FromBool
VarUI4FromI2
VarDecFromI2
VarEqv
SafeArrayGetDim
VarBoolFromDec
VariantCopy
VarBstrFromUI1
VariantChangeType
VarMod
VarUI4FromUI1
VarUdateFromDate
DllCanUnloadNow
VarBoolFromI1
VarUI8FromBool
VarDateFromUI8
VarCyFromR8
VarCyFromDec
VarI8FromI1
VarCyFromUI1
VarUI2FromI4
SafeArrayGetVartype
VariantTimeToSystemTime
VarI1FromI2
msvcrt
__p__fileinfo
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
wscanf
__getmainargs
_wcsset
is_wctype
__p__commode
_chsize
_findfirsti64
??_7bad_cast@@6B@
___mb_cur_max_func
__setlc_active
_ftime
__lc_collate_cp
__p__dstbias
_wpgmptr
__set_app_type
calloc
_cwait
_set_sbh_threshold
__crtLCMapStringA
_wspawnle
_CIfmod
_utime64
__p__tzname
strtod
_rotl
??_G__non_rtti_object@@UAEPAXI@Z
_gcvt
_adj_fptan
_CxxThrowException
isxdigit
exit
_heapused
_putenv
_splitpath
_CIsqrt
_wpopen
pow
msvcrt20
mblen
??_Estrstreambuf@@UAEPAXI@Z
_winmajor
_safe_fprem
fgetws
_wspawnle
??_8iostream@@7Bistream@@@
??_Gstreambuf@@UAEPAXI@Z
?str@strstream@@QAEPADXZ
__dllonexit
?rdbuf@strstream@@QBEPAVstrstreambuf@@XZ
?rdstate@ios@@QBEHXZ
??6ostream@@QAEAAV0@E@Z
?rdbuf@ifstream@@QBEPAVfilebuf@@XZ
?get@istream@@QAEAAV1@AAD@Z
_pwctype
??_Gstdiobuf@@UAEPAXI@Z
strchr
_wmakepath
_heapwalk
?overflow@stdiobuf@@UAEHH@Z
??5istream@@QAEAAV0@AAD@Z
??_7stdiostream@@6B@
iswcntrl
??_Dfstream@@QAEXXZ
fgetwc
fgetpos
_dup2
??0istrstream@@QAE@PAD@Z
_fileno
mbstowcs
_isnan
_wexeclpe
??1Iostream_init@@QAE@XZ
?attach@ifstream@@QAEXH@Z
__p__daylight
_ismbcalpha
?fill@ios@@QAEDD@Z
?unbuffered@streambuf@@IAEXH@Z
_waccess
??7ios@@QBEHXZ
?setmode@fstream@@QAEHH@Z
??_8istream_withassign@@7B@
_j1
??0ios@@QAE@PAVstreambuf@@@Z
??0ostream@@QAE@PAVstreambuf@@@Z
??6ostream@@QAEAAV0@PBE@Z
??_Gfstream@@UAEPAXI@Z
_tcsinc
_adj_fpatan
qsort
_yn
?x_lockc@ios@@0U_RTL_CRITICAL_SECTION@@A
?seekp@ostream@@QAEAAV1@JW4seek_dir@ios@@@Z
_adjust_fdiv
_wcsicoll
iswalpha
??_Dostrstream@@QAEXXZ
putchar
??4istream_withassign@@QAEAAVistream@@PAVstreambuf@@@Z
_tcslwr
__p___argc
_safe_fdiv
vfwprintf
sinh
system
_mbsbtype
_mbscspn
_osver
_filbuf
_cabs
_mbsspnp
??_Dstrstream@@QAEXXZ
??5istream@@QAEAAV0@AAM@Z
??6ostream@@QAEAAV0@J@Z
setupapi
CM_Add_ID_ExA
SetupGetFileQueueFlags
CM_Open_Class_KeyA
SetupCopyOEMInfW
SetupDiInstallClassExW
SetupInstallFileW
SetupQueueDeleteSectionA
SetupDiGetHwProfileFriendlyNameExW
SetupGetLineCountA
SetupQueueCopyIndirectW
CM_Invert_Range_List
CM_Get_Device_ID_ListW
SetupDiSetClassInstallParamsW
pSetupWriteLogEntry
SetupSetDirectoryIdW
CM_Get_Class_Key_NameA
CM_Find_Range
SetupDiGetDeviceInterfaceDetailA
SetupRemoveInstallSectionFromDiskSpaceListA
UnicodeToMultiByte
SetupDiSetDeviceRegistryPropertyA
CMP_Report_LogOn
pSetupVerifyQueuedCatalogs
SetupDiDestroyDeviceInfoList
SetupCopyErrorA
SetupFindNextMatchLineW
CM_Enumerate_Classes_Ex
CM_Get_Device_Interface_AliasW
SetupDiOpenDeviceInterfaceRegKey
shdocvw
URLQualifyA
SHGetIDispatchForFolder
HlinkFindFrame
OpenURL
DllGetClassObject
DllGetVersion
URLQualifyW
SHAddSubscribeFavorite
ImportPrivacySettings
SoftwareUpdateMessageBox
DllRegisterWindowClasses
HlinkFrameNavigateNHL
DllCanUnloadNow
DoPrivacyDlg
DoOrganizeFavDlg
DoOrganizeFavDlgW
SetShellOfflineState
DoFileDownload
HlinkFrameNavigate
DoAddToFavDlg
AddUrlToFavorites
DoAddToFavDlgW
SetQueryNetSessionCount
comctl32
ImageList_DragMove
CreatePropertySheetPageA
PropertySheet
CreatePropertySheetPage
ImageList_Remove
CreateToolbar
ImageList_DragEnter
ImageList_ReplaceIcon
FlatSB_GetScrollInfo
ImageList_EndDrag
CreatePropertySheetPageW
FlatSB_SetScrollInfo
PropertySheetW
FlatSB_SetScrollRange
ImageList_Merge
InitMUILanguage
ShowHideMenuCtl
DllGetVersion
ImageList_DragLeave
ImageList_SetIconSize
ImageList_Read
ImageList_Replace
PropertySheetA
CreateStatusWindowA
ImageList_AddMasked
ImageList_Duplicate
ImageList_SetFlags
ImageList_GetImageCount
ImageList_DragShowNolock
FlatSB_GetScrollPos
ImageList_GetImageRect
DrawInsert
MenuHelp
ImageList_SetOverlayImage
ImageList_LoadImageA
ImageList_GetBkColor
CreateStatusWindowW
FlatSB_ShowScrollBar
ImageList_DrawEx
ole32
HENHMETAFILE_UserMarshal
ComPs_NdrDllUnregisterProxy
CoRegisterClassObject
CoGetClassObject
OleDraw
WdtpInterfacePointer_UserFree
CoDosDateTimeToFileTime
CoImpersonateClient
SetConvertStg
OleNoteObjectVisible
HDC_UserMarshal
CoGetCurrentProcess
CoCreateInstance
CreateBindCtx
IsEqualGUID
StgConvertPropertyToVariant
HICON_UserFree
CoGetMalloc
OleSetContainedObject
OleGetAutoConvert
PropVariantClear
StgOpenAsyncDocfileOnIFillLockBytes
StgPropertyLengthAsVariant
StgOpenStorageEx
CreateStreamOnHGlobal
CreateDataCache
HkOleRegisterObject
WriteFmtUserTypeStg
CoWaitForMultipleHandles
HENHMETAFILE_UserSize
CoQueryClientBlanket
OleDestroyMenuDescriptor
CreatePointerMoniker
OleCreateEx
HDC_UserFree
HENHMETAFILE_UserFree
StgCreatePropSetStg
CoGetContextToken
CoGetInterceptorFromTypeInfo
OleConvertOLESTREAMToIStorage
HICON_UserUnmarshal
kernel32
GetThreadContext
WritePrivateProfileStringA
MoveFileWithProgressW
DeleteFiber
DebugActiveProcess
GetProfileIntW
FreeLibraryAndExitThread
SetConsoleCP
SetProcessPriorityBoost
CreateMutexA
GetVolumePathNameW
CreateHardLinkA
GetPriorityClass
FileTimeToSystemTime
CmdBatNotification
SetProcessAffinityMask
GetConsoleCommandHistoryLengthW
EnumResourceTypesW
SetConsoleNumberOfCommandsW
FindClose
GetConsoleProcessList
CreateSemaphoreA
RegisterWaitForSingleObjectEx
SetConsoleFont
GetDefaultCommConfigA
GetLongPathNameW
LocalFlags
DeviceIoControl
GetProcessPriorityBoost
GetEnvironmentStringsW
AllocConsole
VirtualAlloc
LocalLock
IsValidLanguageGroup
GetThreadSelectorEntry
dbnmpntw
ConnectionOpenW
ConnectionServerEnum
ConnectionServerEnumW
ConnectionError
ConnectionWrite
ConnectionWriteOOB
ConnectionTransact
ConnectionMode
ConnectionClose
ConnectionObjectSize
ConnectionErrorW
ConnectionRead
ConnectionCheckForData
ConnectionVer
ConnectionOpen
ConnectionStatus
user32
IsIconic
SetScrollPos
MoveWindow
gdi32
RectVisible
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ