Static task
static1
Behavioral task
behavioral1
Sample
3fdcab267b5fa9489599e39e733faff8_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3fdcab267b5fa9489599e39e733faff8_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3fdcab267b5fa9489599e39e733faff8_JaffaCakes118
-
Size
28KB
-
MD5
3fdcab267b5fa9489599e39e733faff8
-
SHA1
d81445560ec583bfdfaa555bb43b80bd749c343e
-
SHA256
05159fcf849eb1b1c213ad62068d8f984503dc3cee229b11cef8034b3a6fa724
-
SHA512
bb8a338cd21e85f002e973c6384d834c6e3ada6ec424f98051a581e2ea65ba53ae5ca4b20663fec17c298f1ea46522e569e997c8226b34bd65443f7bb4a8af4b
-
SSDEEP
768:ff/t84c7tq0H6PnDEIe1oYNO0govgMNapRXaCaRU:fY7tq0+ejPbalr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3fdcab267b5fa9489599e39e733faff8_JaffaCakes118
Files
-
3fdcab267b5fa9489599e39e733faff8_JaffaCakes118.exe windows:5 windows x86 arch:x86
dd290c82870956484bd20e407c0e097b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
auxSetVolume
waveInAddBuffer
mciGetDeviceIDW
mixerGetDevCapsA
waveOutPause
auxGetDevCapsA
midiStreamRestart
waveOutGetPitch
mciSetDriverData
mciSendCommandW
mmTaskYield
mmDrvInstall
midiOutGetID
NotifyCallbackData
waveOutGetNumDevs
mmioSetBuffer
mmioAdvance
auxOutMessage
mmTaskSignal
mciGetYieldProc
midiInPrepareHeader
mciGetDeviceIDA
waveInReset
PlaySoundA
midiStreamProperty
joyGetThreshold
WOW32ResolveMultiMediaHandle
SendDriverMessage
mixerGetLineControlsW
mixerGetControlDetailsW
msvcp60
?underflow@?$basic_filebuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
_Exp
?tellg@?$basic_istream@GU?$char_traits@G@std@@@std@@QAE?AV?$fpos@H@2@XZ
??_7?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
?setstate@ios_base@std@@QAEXF@Z
?widen@?$ctype@D@std@@QBEPBDPBD0PAD@Z
?flags@ios_base@std@@QAEHH@Z
?do_decimal_point@?$numpunct@D@std@@MBEDXZ
?open@?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAEPAV12@PBDH@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@PAD@Z
?close@?$basic_fstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?positive_sign@?$_Mpunct@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??9std@@YA_NPBGABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z
?_Index@ios_base@std@@0HA
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?_Addstd@ios_base@std@@IAEXXZ
?epsilon@?$numeric_limits@K@std@@SAKXZ
?imbue@?$basic_ios@GU?$char_traits@G@std@@@std@@QAE?AVlocale@2@ABV32@@Z
?unget@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Exp@?$_Ctr@O@std@@SAFPAOOF@Z
??_7?$num_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
?do_falsename@?$numpunct@D@std@@MBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
?_Getcat@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIXZ
?data@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
?ldexp@?$_Ctr@N@std@@SANNH@Z
??0?$basic_fstream@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
??0?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??0?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
msvcrt20
?clog@@3Vostream_withassign@@A
_wstrdate
_getch
__p__fmode
?egptr@streambuf@@IBEPADXZ
ldexp
_c_exit
$I10_OUTPUT
_tcsnccat
_fstat
__doserrno
_mbsrchr
?endl@@YAAAVostream@@AAV1@@Z
?seekoff@strstreambuf@@UAEJJW4seek_dir@ios@@H@Z
??0ostream_withassign@@QAE@XZ
fwprintf
_strset
_fdopen
??4istream_withassign@@QAEAAV0@ABV0@@Z
cos
__p___wargv
??4ifstream@@QAEAAV0@ABV0@@Z
??_8istrstream@@7B@
_tzname
?seekpos@streambuf@@UAEJJH@Z
imm32
ImmUnlockImeDpi
ImmLockClientImc
ImmGetImeMenuItemsA
ImmIMPGetIMEW
ImmLoadIME
ImmGetGuideLineA
ImmGetIMCLockCount
ImmDisableIME
ImmTranslateMessage
ImmUnlockIMCC
ImmNotifyIME
ImmReleaseContext
ImmReSizeIMCC
ImmSendIMEMessageExW
ImmEnumInputContext
ImmFreeLayout
ImmGenerateMessage
ImmUnlockIMC
ImmActivateLayout
ImmCreateContext
ImmRegisterClient
ImmShowSoftKeyboard
ImmGetImeMenuItemsW
ImmSystemHandler
ImmWINNLSGetIMEHotkey
ImmDestroySoftKeyboard
ImmSendIMEMessageExA
ImmSetCompositionFontW
ImmWINNLSEnableIME
ImmGetStatusWindowPos
kernel32
SetVolumeMountPointA
CreateJobObjectW
DeleteTimerQueueEx
LoadLibraryExW
FindClose
ExitProcess
MapUserPhysicalPages
VirtualAlloc
RtlFillMemory
GetShortPathNameW
GetVersion
UnmapViewOfFile
GetLogicalDriveStringsA
SetComputerNameExW
CancelTimerQueueTimer
Process32FirstW
InterlockedDecrement
GetThreadLocale
WaitCommEvent
Sleep
GetProcessPriorityBoost
TerminateProcess
WriteTapemark
InterlockedPopEntrySList
SetTermsrvAppInstallMode
GetProfileSectionW
FreeEnvironmentStringsA
ReadConsoleOutputCharacterW
ReadConsoleOutputA
SetThreadPriorityBoost
RegisterWaitForInputIdle
WriteFileEx
CreateThread
QueryDosDeviceA
AddAtomA
CreateMutexW
GetTimeZoneInformation
GetConsoleOutputCP
GetVersionExA
EnumSystemLocalesA
GlobalFlags
Beep
IsDebuggerPresent
ScrollConsoleScreenBufferA
ReadConsoleInputW
SetVDMCurrentDirectories
CompareStringW
LZStart
CreateTimerQueue
CreateMailslotA
Thread32First
GlobalFindAtomW
_lcreat
CommConfigDialogW
EnumDateFormatsExA
GetHandleInformation
GlobalMemoryStatusEx
GetStartupInfoW
OpenProcess
GetExpandedNameW
GetConsoleHardwareState
GetNumaNodeProcessorMask
AddConsoleAliasW
QueryPerformanceFrequency
Process32NextW
odbc32
SQLNativeSqlW
SQLFreeConnect
SQLDescribeColA
SQLDriverConnectW
SQLProceduresA
SQLFreeStmt
SQLColAttributeW
SQLPutData
SQLGetStmtAttrA
SQLExecDirectA
SQLAllocConnect
SQLSpecialColumns
SQLError
SQLSetStmtAttr
SQLGetConnectOptionW
SQLSetEnvAttr
SQLGetConnectAttrA
SQLCancel
ODBCSetTryWaitValue
SQLConnectW
SQLColAttributesW
SQLGetTypeInfoW
VFreeErrors
SQLGetStmtAttrW
SQLDriverConnectA
SQLCopyDesc
OpenODBCPerfData
SQLGetDiagRec
SQLTables
SQLDriversW
SQLSetDescField
comdlg32
dwOKSubclass
GetFileTitleW
FindTextW
Ssync_ANSI_UNICODE_Struct_For_WOW
ChooseFontW
ChooseColorW
GetSaveFileNameA
PrintDlgA
FindTextA
PrintDlgW
CommDlgExtendedError
PageSetupDlgW
WantArrows
GetFileTitleA
PageSetupDlgA
dwLBSubclass
GetSaveFileNameW
ReplaceTextA
PrintDlgExA
GetOpenFileNameW
LoadAlterBitmap
GetOpenFileNameA
ChooseColorA
ChooseFontA
PrintDlgExW
ReplaceTextW
ws2help
WahCreateNotificationHandle
WahCreateHandleContextTable
WahEnumerateHandleContexts
WahInsertHandleContext
WahCloseHandleHelper
WahOpenApcHelper
WahCloseApcHelper
WahWaitForNotification
WahOpenCurrentThread
WahRemoveHandleContext
WahDestroyHandleContextTable
WahNotifyAllProcesses
WahCloseNotificationHandleHelper
WahOpenNotificationHandleHelper
WahCreateSocketHandle
WahOpenHandleHelper
WahCloseSocketHandle
WahEnableNonIFSHandleSupport
WahCloseThread
WahCompleteRequest
WahReferenceContextByHandle
WahQueueUserApc
WahDisableNonIFSHandleSupport
opengl32
glIndexsv
wglGetPixelFormat
glMaterialiv
glGetString
glLineWidth
glTexCoord3sv
glEvalCoord1dv
wglUseFontBitmapsA
glVertex3i
glNormalPointer
glVertex3f
glClearColor
glGetIntegerv
glDrawElements
glTexCoord3f
glEvalCoord2d
glGetTexLevelParameterfv
glColor4ubv
glMapGrid1f
glScalef
glRasterPos2d
glTexSubImage1D
wglDescribePixelFormat
glGetTexEnvfv
glEvalCoord1f
glNormal3b
glRasterPos2s
glGetTexGeniv
glFinish
glTexCoord3iv
glColor4bv
glGetLightiv
glNormal3d
glColor4b
glPixelStorei
wglCopyContext
glPixelTransferf
glShadeModel
glBitmap
glTexCoord1fv
glTranslatef
glMap2d
expsrv
rtcChangeDrive
rtcEndOfFile
__vbaStrVarVal
__vbaR8FixI2
rtcIsMissing
__vbaRsetFixstr
_adj_fdiv_m16i
__vbaR8Var
__vbaR4Str
rtcMsgBox
rtcCurrentDirBstr
__vbaAryVarVarg
GetMem1
__vbaI2Str
__vbaCyAbs
__vbaStrVarCopy
rtcFileWidth
rtcCreateObject
__vbaVarTextTstLt
__vbaUI1I4
rtcMIRR
rtI4FromErrVar
BASIC_CLASS_Invoke
rtcVarBstrFromChar
rtcGetTimeBstr
__vbaLenBstr
rtcSwitch
VarPtr
__vbaUdtVar
__vbaLateIdStAd
rtcUpperCaseVar
__vbaInStrB
ProcCallEngine
rtcMacId
__vbaVarCmpLt
rtcJoin
__vbaFileCloseAll
rtcArray
user32
PostMessageW
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE