Static task
static1
Behavioral task
behavioral1
Sample
14a5a716f0d956b23d49152e851acd74_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
14a5a716f0d956b23d49152e851acd74_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
14a5a716f0d956b23d49152e851acd74_JaffaCakes118
-
Size
287KB
-
MD5
14a5a716f0d956b23d49152e851acd74
-
SHA1
6915fcefcd0dde786274f5c69d6e374ed5bc747d
-
SHA256
154ea8e9ac2aa3d42403b4d3c6654c0d731134501acc1776069264b821acfc72
-
SHA512
4be67817b6a0fbce0272550b76f74149806283631d28104dfcf8483b4ebef945c2b8806783813cd3b279394124bb18316749070fe3e04d8cda8902a194a7d0d1
-
SSDEEP
3072:La8+zrrSm66YM6dbXdIgv2YxTX6K0PIsVodE6TiOcCCIMbQSQvl6G14+Eh9C:28orSmWz2QXwPXk7SQvl6G14+v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14a5a716f0d956b23d49152e851acd74_JaffaCakes118
Files
-
14a5a716f0d956b23d49152e851acd74_JaffaCakes118.exe windows:4 windows x86 arch:x86
33d1a216993f565273847691b437d994
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
PlaySoundA
mciSendCommandA
mfc40
ord2694
ord3580
ord4101
ord3907
ord3134
ord570
ord3340
ord706
ord2471
ord760
ord3656
ord762
ord486
ord315
ord731
ord2060
ord2003
ord2064
ord1996
ord2072
ord3724
ord2320
ord5492
ord4173
ord5673
ord5674
ord3068
ord3067
ord729
ord1615
ord265
ord3734
ord4546
ord1829
ord2388
ord2091
ord2676
ord4545
ord4549
ord3947
ord3790
ord2914
ord4463
ord863
ord4845
ord2962
ord2528
ord2527
ord3648
ord5363
ord3577
ord1540
ord4653
ord2084
ord4697
ord2324
ord1445
ord3917
ord2139
ord3909
ord3345
ord3346
ord4670
ord5490
ord600
ord5506
ord1700
ord3760
ord4065
ord4064
ord4357
ord3853
ord4350
ord4521
ord3826
ord3833
ord4186
ord4348
ord4007
ord4021
ord4019
ord4002
ord4005
ord4000
ord4417
ord4414
ord3606
ord4656
ord4704
ord3267
ord1493
ord3913
ord3110
ord3158
ord3185
ord719
ord569
ord314
ord503
ord2115
ord5121
ord1425
ord1426
ord1035
ord2510
ord4676
ord662
ord421
ord2218
ord2327
ord1060
ord1449
ord2081
ord2065
ord2707
ord3761
ord5648
ord3963
ord2234
ord2197
ord5070
ord965
ord4627
ord363
ord5652
ord4713
ord4715
ord2390
ord3579
ord4165
ord4719
ord5053
ord2620
ord2696
ord3259
ord721
ord504
ord3431
ord3641
ord549
ord4714
ord4635
ord292
ord873
ord371
ord3655
ord2299
ord5418
ord4703
ord5124
ord3630
ord3784
ord423
ord3214
ord2515
ord5415
ord483
ord2046
ord3262
ord724
ord509
ord3762
ord4296
ord1090
ord1014
ord1041
ord1532
ord2007
ord2317
ord980
ord2470
ord2959
ord3382
ord545
ord285
ord3153
ord5467
ord5207
ord2608
ord1583
ord3727
ord4163
ord2675
ord2681
ord5612
ord2195
ord2224
ord4659
ord1510
ord4934
ord2774
ord5005
ord3902
ord4407
ord4316
ord2100
ord3870
ord3007
ord2789
ord5385
ord5470
ord4097
ord3908
ord578
ord325
ord4282
ord5584
ord3662
ord2293
ord1061
ord5570
ord5569
ord2781
ord3046
ord2200
ord341
ord3213
ord5127
ord2416
ord5454
ord373
ord622
ord1616
ord3735
ord4145
ord3378
ord1851
ord2092
ord4547
ord4550
ord3948
ord2913
ord862
ord2529
ord3649
ord2085
ord4698
ord3918
ord3910
ord3711
ord2264
ord3177
ord1429
ord364
ord2134
ord2149
ord4671
ord3715
ord5532
ord3938
ord834
ord3314
ord4694
ord3837
ord5647
ord4608
ord2086
ord4657
ord3890
ord1539
ord3578
ord5360
ord2199
ord4450
ord4312
ord3859
ord4681
ord2845
ord2744
ord3945
ord2843
ord2754
ord2617
ord4691
ord1850
ord2140
ord4677
ord1494
ord4510
ord3268
ord5649
ord1785
ord2323
ord3922
ord4096
ord3906
ord2097
ord2909
ord1869
ord1368
msvcrt40
__set_app_type
_except_handler3
_controlfp
_adjust_fdiv
__p__fmode
__setusermatherr
__getmainargs
_initterm
__p__acmdln
_XcptFilter
_exit
_onexit
__dllonexit
malloc
fgets
exit
srand
rand
clock
__p___mb_cur_max
_isctype
__p__pctype
tolower
_strlwr
fwrite
_setmbcp
localtime
time
__CxxFrameHandler
_chdir
fclose
atoi
sprintf
toupper
__p__commode
fopen
fread
ftell
fseek
remove
_mbscmp
_mbsicmp
_ftol
kernel32
GetCurrentDirectoryA
FreeLibrary
GetSystemDefaultLangID
WaitForSingleObject
CloseHandle
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
FindNextFileA
FindFirstFileA
GetDriveTypeA
GetLogicalDrives
SuspendThread
ResumeThread
GlobalMemoryStatus
GetVersion
GetModuleHandleA
GetStartupInfoA
Sleep
LoadLibraryA
user32
PostQuitMessage
LoadCursorA
PostMessageA
LoadBitmapA
SetTimer
SetMenu
HiliteMenuItem
UnionRect
ReleaseCapture
SetCapture
GetSystemMetrics
UpdateWindow
GetWindowDC
LoadMenuA
InvalidateRect
EnableWindow
IntersectRect
GetClientRect
LoadImageA
GetDC
PtInRect
SendMessageA
IsRectEmpty
SetCursor
ReleaseDC
gdi32
RealizePalette
GetPixel
CreateCompatibleDC
BitBlt
GetObjectA
GetTextExtentPointA
GetDIBColorTable
CreateFontA
LPtoDP
GetDeviceCaps
SetPaletteEntries
CreatePalette
SetDIBColorTable
GetPaletteEntries
StretchBlt
CreateBitmap
CreateCompatibleBitmap
Sections
.text Size: 221KB - Virtual size: 221KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 330KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ