Static task
static1
Behavioral task
behavioral1
Sample
32cb266c12557fc34e88f0c8c93a3480_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
32cb266c12557fc34e88f0c8c93a3480_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
32cb266c12557fc34e88f0c8c93a3480_JaffaCakes118
-
Size
316KB
-
MD5
32cb266c12557fc34e88f0c8c93a3480
-
SHA1
f70c87d8281addb6b5d3c4b60bc8c9e33ac51754
-
SHA256
efd6987f5b5418ea109f1432a58b4d7960b43f50b4198fcd1f4275d072981a77
-
SHA512
4b1432be0c006023281d261ad01641974206d819e3132f162844d41c7b620720b25f127e59170bce8819b874a705c6c73d00328ccd1c67f95074d4e8ec425c86
-
SSDEEP
6144:hVuNKjp1lv3QJxzrQ9tW5OZjYnTA4EIBFXTYGj5/k:htZ3gouORYnczOXMG1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32cb266c12557fc34e88f0c8c93a3480_JaffaCakes118
Files
-
32cb266c12557fc34e88f0c8c93a3480_JaffaCakes118.exe windows:4 windows x86 arch:x86
dd66ead1f48c450aa77c57e219f00ed9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord3079
ord4080
ord4627
ord4432
ord6478
ord825
ord6514
ord6800
ord6808
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord3136
ord4622
ord4424
ord3738
ord800
ord815
ord540
ord561
ord941
ord858
ord535
ord2818
ord537
ord860
ord2621
ord1134
ord6877
ord2764
ord1168
ord641
ord2514
ord3811
ord5265
ord4998
ord6052
ord1775
ord5241
ord5280
ord3749
ord1727
ord5261
ord2124
ord4425
ord3597
ord1146
ord324
ord2301
ord4234
ord6199
ord5981
ord6796
ord6880
ord3092
ord4710
ord755
ord2379
ord470
ord4853
ord4224
ord6334
ord4376
ord6453
ord3626
ord2414
ord283
ord3663
ord5651
ord3616
ord665
ord3127
ord1979
ord3825
ord3318
ord5186
ord350
ord354
ord6385
ord2614
ord6648
ord3176
ord939
ord924
ord5572
ord2915
ord922
ord926
ord4129
ord6663
ord4202
ord2919
ord6283
ord6282
ord2393
ord5440
ord6383
ord5450
ord6394
ord773
ord501
ord6876
ord4327
ord1083
ord5607
ord2762
ord6153
ord6928
ord6930
ord2781
ord668
ord2770
ord356
ord353
ord550
ord5645
ord5583
ord3701
ord500
ord772
ord5860
ord6142
ord1832
ord3126
ord349
ord1833
ord2917
ord2803
ord958
ord6312
ord4177
ord6010
ord5773
ord2601
ord3180
ord3183
ord3507
ord6264
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord6691
ord4465
ord3259
ord3147
ord2982
ord5277
ord1576
ord6614
ord2446
ord5260
ord1725
ord5065
ord3748
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5281
ord4353
ord6374
ord5163
ord2385
ord5240
ord4407
ord1776
ord4078
ord6054
ord4108
ord4960
ord4963
ord4524
ord4529
ord4526
ord4543
ord4545
ord4531
ord4889
ord4720
ord4347
ord4340
ord5076
ord6817
ord4892
ord4370
ord4899
ord4588
ord4589
ord6835
ord6856
ord6845
ord6812
ord6815
ord6816
ord6858
ord6846
ord6839
ord6814
ord6847
ord6867
ord6859
ord6832
ord6855
ord6823
ord6857
ord6807
ord6591
ord6650
ord6597
ord5442
ord823
msvcrt
__CxxFrameHandler
_mbsicmp
fclose
fwrite
fopen
free
_mbscmp
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
_CxxThrowException
_purecall
sprintf
_strcmpi
_setmbcp
fread
_splitpath
ftell
fseek
isspace
_mbschr
tolower
_ismbcspace
_mbspbrk
_mbsnbicmp
_chdir
_getcwd
memmove
calloc
__dllonexit
_onexit
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
??0exception@@QAE@ABQBD@Z
kernel32
CreateFileA
GetLastError
MoveFileA
CloseHandle
DeleteFileA
Sleep
GetWindowsDirectoryA
Module32Next
Module32First
CreateToolhelp32Snapshot
Process32Next
Process32First
GetExitCodeProcess
TerminateProcess
OpenProcess
lstrlenA
lstrcmpA
GetModuleFileNameA
GetSystemDirectoryA
SetFileAttributesA
GetDriveTypeA
SetVolumeLabelA
GetDiskFreeSpaceA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
SetFilePointer
GetStartupInfoA
GetModuleHandleA
GetCommandLineA
LockResource
LoadResource
SizeofResource
FindResourceA
CreateDirectoryA
MulDiv
GlobalUnlock
GlobalLock
GlobalAlloc
MultiByteToWideChar
FindClose
FindFirstFileA
user32
GetClientRect
GetSystemMetrics
IsIconic
FrameRect
SendMessageA
GetWindowRect
SetForegroundWindow
LoadIconA
EnableWindow
DrawIcon
CharNextA
MessageBoxExA
advapi32
RegEnumValueA
RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
shell32
ShellExecuteA
ole32
CoInitialize
CoCreateInstance
CreateStreamOnHGlobal
olepro32
ord251
wininet
InternetReadFile
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
msvcp60
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1ios_base@std@@UAE@XZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??_8?$basic_ifstream@DU?$char_traits@D@std@@@std@@7B@
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??_7?$basic_ifstream@DU?$char_traits@D@std@@@std@@6B@
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??_8?$basic_ofstream@DU?$char_traits@D@std@@@std@@7B@
??_7?$basic_ofstream@DU?$char_traits@D@std@@@std@@6B@
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1ostrstream@std@@UAE@XZ
??1strstreambuf@std@@UAE@XZ
?_Init@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@XZ
?_Global@_Locimp@locale@std@@0PAV123@A
??1_Lockit@std@@QAE@XZ
?_Init@strstreambuf@std@@IAEXHPAD0H@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?overflow@strstreambuf@std@@MAEHH@Z
?pbackfail@strstreambuf@std@@MAEHH@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?underflow@strstreambuf@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
??_7out_of_range@std@@6B@
??1out_of_range@std@@UAE@XZ
??0out_of_range@std@@QAE@ABV01@@Z
??0logic_error@std@@QAE@ABV01@@Z
??1?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??_8?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B@
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??_7?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??_7?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z
?seekoff@strstreambuf@std@@MAE?AV?$fpos@H@2@JW4seekdir@ios_base@2@H@Z
?seekpos@strstreambuf@std@@MAE?AV?$fpos@H@2@V32@H@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??0ios_base@std@@IAE@XZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?ends@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?freeze@strstreambuf@std@@QAEX_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Tidy@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEXXZ
??_7?$basic_streambuf@DU?$char_traits@D@std@@@std@@6B@
??1locale@std@@QAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??0runtime_error@std@@QAE@ABV01@@Z
??1runtime_error@std@@UAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
??_7runtime_error@std@@6B@
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
netapi32
Netbios
ws2_32
gethostbyname
WSAStartup
gethostname
inet_ntoa
WSACleanup
Sections
.text Size: 116KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 160KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ