Static task
static1
Behavioral task
behavioral1
Sample
687c4e4a960b71444e80677eaa355f1d_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
687c4e4a960b71444e80677eaa355f1d_JaffaCakes118
-
Size
309KB
-
MD5
687c4e4a960b71444e80677eaa355f1d
-
SHA1
c36d862120d3b1fb76b8853f4792d4dedaa7e07d
-
SHA256
773aecde6f927b32124dbdfcd5b17dea541c5e517c6f061a8e712db9dbf4d4f1
-
SHA512
41afcb5c511956ba748059830cf0808fa926a197737070646ba14944f7200ff6ca2f8433ad16338eb23d60377bf1db0ef1823157ed6e9cc2ca461de12c81fbea
-
SSDEEP
6144:pxNEPtda4WDYyC5mRpMXin20SACqWJBXp81BRr:y3yCYRd20SXfXSZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 687c4e4a960b71444e80677eaa355f1d_JaffaCakes118
Files
-
687c4e4a960b71444e80677eaa355f1d_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd1a19a34f4229639986c9fdf2c2f80a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
HeapFree
DeviceIoControl
EnterCriticalSection
LeaveCriticalSection
FindClose
GetLocaleInfoA
GetUserDefaultLCID
WritePrivateProfileStringA
lstrcmpiA
GetLastError
GetModuleFileNameA
WideCharToMultiByte
CreateFileA
CreateFileW
FreeLibrary
HeapSize
LoadLibraryA
CloseHandle
FlushFileBuffers
WriteFile
GetTempFileNameA
ReadFile
GetFileSize
SetFilePointer
GetVersionExA
SetLastError
DuplicateHandle
SetEndOfFile
lstrcpyA
GetPrivateProfileIntA
GetModuleHandleA
GetVersionExW
MultiByteToWideChar
VirtualProtect
lstrlenW
DeleteCriticalSection
InitializeCriticalSection
HeapDestroy
lstrlenA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetProcAddress
GetStartupInfoA
user32
EnableWindow
wsprintfA
GetDlgItem
LoadStringA
LoadStringW
CheckDlgButton
CharNextA
advapi32
RegCreateKeyExA
CryptReleaseContext
RegCloseKey
RegOpenKeyExW
RegEnumKeyExW
RegQueryValueExW
CryptHashData
CryptGetHashParam
CryptDestroyHash
RegCreateKeyA
RegSetValueExA
CryptCreateHash
ole32
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemRealloc
msvcrt
realloc
wcslen
memmove
_CIpow
wcsncmp
wcsstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
wcspbrk
towupper
_vsnwprintf
free
wcschr
__dllonexit
_onexit
_except_handler3
time
__CxxFrameHandler
??3@YAXPAX@Z
_initterm
msvcp60
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??Ostd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 287KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ