Static task
static1
Behavioral task
behavioral1
Sample
242fb15d80ea693d678f6215c8ddbd3a_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
242fb15d80ea693d678f6215c8ddbd3a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
242fb15d80ea693d678f6215c8ddbd3a_JaffaCakes118
-
Size
191KB
-
MD5
242fb15d80ea693d678f6215c8ddbd3a
-
SHA1
dc8fc56a2aa65eb27676f5cf0e0bb404b5662e47
-
SHA256
abf2a1ba6120b266c506e2275b52cfee33ec39329b309daa77ae72f19a4d5344
-
SHA512
86d8548cf835a8070c4e75002079bf9e0e556e096927807d702aca513c1388721a8b75147487652ab329794923d117b728a14201cea7cde5f0b3239890904f8e
-
SSDEEP
3072:MdMyqN+ciQ/d31anyJEx6eZwqImvFv1jfTQjZaMLd1gPfDst/qisgdwsr8v9lzoz:2MD+cjfaNxRZr1JajZ7LjafyCisqwsQy
Malware Config
Signatures
Files
-
242fb15d80ea693d678f6215c8ddbd3a_JaffaCakes118.exe windows:4 windows x86 arch:x86
b83329aeedc35407314f2589c75178b0
Code Sign
Signer
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
GetModuleFileNameA
SetCurrentDirectoryA
GetSystemDirectoryA
CloseHandle
SetFileTime
GetFileTime
CreateFileA
MoveFileA
DeleteFileA
GlobalFree
WriteFile
LockResource
GlobalAlloc
LoadResource
SizeofResource
FindResourceA
GetTempPathA
WinExec
LocalFree
LocalAlloc
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
user32
wsprintfA
MessageBoxA
shell32
ShellExecuteA
mfc42
ord823
ord561
ord815
ord1243
ord6467
ord1578
ord600
ord826
ord269
ord1176
msvcrt
_onexit
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
__dllonexit
__p__commode
__p__fmode
__set_app_type
_except_handler3
??3@YAXPAX@Z
??1type_info@@UAE@XZ
_controlfp
__CxxFrameHandler
sprintf
_adjust_fdiv
fprintf
strcpy
strrchr
strchr
strcat
atoi
fopen
fclose
free
strlen
memcpy
printf
_strnicmp
msvcp60
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
Exports
Exports
��BZ�{̐w�1 GĿu M��PP��ݹ���U��K���,v�����U�<:������9H0e��ῖ�Y�n+z��W��Gҳ��tK��x��_�64/ �$e�����y�nM)@�FdLS�����'��Ǐ�'ho�:a�r �_A�RVzD? |�Y�Qw�_i��OR�]}����M8֡y�.�\7����$�U�Z����G(���`��?)�l>��ݚ��Ө�W@E����u�\|��J���]��v#W(�����.|�Saf0��p7\w���A ``�z>oP�#��Q�u�����F*e_ jMM��i�=rY ���3�7���Cjܲ�2�#j1k0�i�=b�"�k�^͊ѷ�I'�ٱ.���Z�آ/������Z?�I���rn&M'+(�s(�[xV����y��][��i��{�����<t<��̙uO�x�Đv�G�]w"^��r���m6 ߜ�DEue�8��sMim?�n;������F�_d��8��ML����a�T�MQ�ow��G��f;&��W�����Z&Cv�Q�, �Ա+�,������#rY��t��8��I��x3҇b$�I�:Y �V?OOG���퇊N�SP{*��T�b� ��O3�r���+�A����k�b|��F�(H7{MqŽ���k�fs_��2��Pv�e�pi�e�EPD�n!U@ݷ �+=�c���L�z����/Wϼ?�D���FDI�܁U��'�L&H�x8��Ks@ӯ��v��� O���h5\�C~a��S��d���jƖ��2�3{̌%t���SK��m�!����2��d��C*!�����_�PX�o��N-'���@9��P��xc���_$H���~�Dk�(56�ƭV�i��@=��� S��dLy��$��QOl��D�Nr�Hf�.v|8 {�r��y,l[AK\K�X�'2��@)��Z��2yJ�%��=��b��Rr<��<3���*�¢p9ã�[h���f�.�� 45��� �ґ��nPdUX�8���&�h0da?������]&Ff5���� �=�۔y#��Fi�ɱ�p�,�^��xc��vS��!�ȗ� �����m�t��af��4��/�^Lf4��������s9MÄ���S�ǃ�r�FO�.��@etx 0�b�bl|�?��{/�V���hr�<�r�O��W�z��p��t��T"z����d��M;ȭ�%�_-8�'�|!��s�Lj�4�w���l��"�:�42{/_�q���!n�V�g�`p?tP�{ �' q��y��1၊��@Qޛ��*J�*g����v����c��.��gx뮿h�э�%]��:�CF٣�7+ e�+�:e��� ����ZH�X�<RT��n�� �s�r�}أx��W .c�7��1���y}���8�tׂzgM�L�Ų?�=��Ф/�� �z�����egƕˏ?�if�V�d]W�_��T���QU��I �ڗ��H��)W��\�!�UPH��a_W�j3�L[A���b�������c�Ĵ� wq���[R��c�EdJ����#��7=z���a ��P/l��=H)E����5�JY�DAm��� �,ob�����iޏ��{��^��6O6�/���� ���W�Gj/������)=�`��-v���&���\��B�,V�t�/�b� �.�c�Ɋtԑ��~��u`U����Ũq��Sc��7�����.9c OaD�K�ӭF|�&4�;S��Q����+;)�̓�t/q��Ş(����DP�*�ʕd��:O�r���OLg�}|�fÜYO��1,P�k�j���UV/�mC��`p,[0�Q,�*�#��ڐ���.,f���!��A��MB�D1j�0�J0��fWiı�q ~�fS��bWQ�� l���䔔��V��Y��-K���B�}d�y���8�DA��^�+ Z3Բ���� l��m�%��9�T�Jw�g�WyQuW�]pD�r_rM@�u�q!ÿय़5/߲H��~�g��[�*��;xd��4QW`�����^��=#Wg�����g���nu9��Ud���5����������v`����&��}��Y�! a^�`�{s, ���Q�P;��$���d"��n�$�j!KUH�$��z�Z@X˙�7��Y�=���?]���a4矛�̅�����@=�<����$I!Hٌ]Cx��h9�����1���Q�9@�sB�>�"�l�m�����iU�7�p��dj��V�?h�Y�0/�8J������l��!}�6@P��g���̪*�Ah������{7U��j�"�!|����t0�B �/��'���F����nL�&J2wQ�GO;���V��=�.�&�'eQ�q��nzΩ�8T���<>P��nq��{e�,w?N��Yqw����n�;�K&}A�P()��<Gh0�.�ԞFNZ�МO�A}�g1mB$3(wW���Co�����5k ��f��P��9�����?*��^RD��8��pN[n�J�8���]i>�Zc؇�M�͔��ؐ����v)9אr�4��p� O��%"�������͂���3f�A7����A�ߓS͙�2-V��?/��7Z;���/���:�*�O���u ���b�K�ʫ`�ަr��S݁��NaA�V���D���Iҹ��1�ں@��K:L�.L���2�Є��;j���C4�qC�.��n╍��|�����%�KBӢN���N0�-60F����GO=<���v���0Z|�/� �����8嶄�u���ږ��mQT�x� ;T^z�Q��(@Nk�w��f�0Y��R�D�#�����3���샾����L>�i�cGQ�Z�>�Dy`Z3'yv0��qKb���{|�2�ꙴ�2q(#��j�)�:�X�x��wR�#�ߘ�l�$�|/�h}�3��I��w ��y���$�t��Ah��.����r��/UC*ܸ���e�x�����C�WfXI���l�Yuh���zԁ���]R��zJ+Y�t5}8�SȰq�t�pf�\P�"EŌl%�ٜ�I�7����%T,���R���<x�8����O��8*�>�O���
Sections
.text Size: - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
���� Size: - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
���� Size: 512B - Virtual size: 24B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
���� Size: 184KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ