Static task
static1
Behavioral task
behavioral1
Sample
156733be21efac4777082c9c2caf51cd_JaffaCakes118.exe
Resource
win7-20240611-en
General
-
Target
156733be21efac4777082c9c2caf51cd_JaffaCakes118
-
Size
309KB
-
MD5
156733be21efac4777082c9c2caf51cd
-
SHA1
cd396721463e45b248875a268684a3014429b75a
-
SHA256
a6e65e612a17738a29d15e9140872be17526bc934b04d02851e038d229c1515c
-
SHA512
135b7aea7426d2ee41a2b701559d278c4edfa05b2cd1c9c4d7e2616bc4468df0d98f35f56bf84c4eeba93dd09aa20bd6a1822adee40c24c6f631e4f9222d9f5d
-
SSDEEP
6144:pxNEPtda4WDYyC5mRpMXin20SACqWJBXp81BR2:y3yCYRd20SXfXSI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 156733be21efac4777082c9c2caf51cd_JaffaCakes118
Files
-
156733be21efac4777082c9c2caf51cd_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd1a19a34f4229639986c9fdf2c2f80a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
HeapFree
DeviceIoControl
EnterCriticalSection
LeaveCriticalSection
FindClose
GetLocaleInfoA
GetUserDefaultLCID
WritePrivateProfileStringA
lstrcmpiA
GetLastError
GetModuleFileNameA
WideCharToMultiByte
CreateFileA
CreateFileW
FreeLibrary
HeapSize
LoadLibraryA
CloseHandle
FlushFileBuffers
WriteFile
GetTempFileNameA
ReadFile
GetFileSize
SetFilePointer
GetVersionExA
SetLastError
DuplicateHandle
SetEndOfFile
lstrcpyA
GetPrivateProfileIntA
GetModuleHandleA
GetVersionExW
MultiByteToWideChar
VirtualProtect
lstrlenW
DeleteCriticalSection
InitializeCriticalSection
HeapDestroy
lstrlenA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetProcAddress
GetStartupInfoA
user32
EnableWindow
wsprintfA
GetDlgItem
LoadStringA
LoadStringW
CheckDlgButton
CharNextA
advapi32
RegCreateKeyExA
CryptReleaseContext
RegCloseKey
RegOpenKeyExW
RegEnumKeyExW
RegQueryValueExW
CryptHashData
CryptGetHashParam
CryptDestroyHash
RegCreateKeyA
RegSetValueExA
CryptCreateHash
ole32
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemRealloc
msvcrt
realloc
wcslen
memmove
_CIpow
wcsncmp
wcsstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
wcspbrk
towupper
_vsnwprintf
free
wcschr
__dllonexit
_onexit
_except_handler3
time
__CxxFrameHandler
??3@YAXPAX@Z
_initterm
msvcp60
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??Ostd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 287KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ