Static task
static1
Behavioral task
behavioral1
Sample
72265e82753c3ff57945f5f6a2708997_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
72265e82753c3ff57945f5f6a2708997_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
72265e82753c3ff57945f5f6a2708997_JaffaCakes118
-
Size
22KB
-
MD5
72265e82753c3ff57945f5f6a2708997
-
SHA1
18143864dc36838341bc3bab1e1e63d0be562e2e
-
SHA256
00078f23288cc9e4f66038391556e3db0f362aca89753c094a9664e3bf9ae4e6
-
SHA512
585a97a6931737b5ae8b9e2756096908baabe78da3958c19e61589cb5722eedb96caf4fd1762257a080be026a47809abc0958f9b4faa326673449763da2505f1
-
SSDEEP
384:XuUr9hAlx2rl+G50x+mxsD/YttEJs7v3+pSuWFqAhnVnQEECPZUwK:Xu+hAj2Uo0xvkYtqJNpAnVn2Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72265e82753c3ff57945f5f6a2708997_JaffaCakes118
Files
-
72265e82753c3ff57945f5f6a2708997_JaffaCakes118.exe windows:5 windows x86 arch:x86
4867e3d4adb6776de56c2e98b99bc3d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcirt
?fd@fstream@@QBEHXZ
?pbackfail@streambuf@@UAEHH@Z
?fill@ios@@QBEDXZ
?pptr@streambuf@@IBEPADXZ
?x_lockc@ios@@0U_CRT_CRITICAL_SECTION@@A
?out_waiting@streambuf@@QBEHXZ
??4ostream_withassign@@QAEAAV0@ABV0@@Z
?str@strstream@@QAEPADXZ
?precision@ios@@QAEHH@Z
?setmode@ofstream@@QAEHH@Z
??_Gistrstream@@UAEPAXI@Z
??0filebuf@@QAE@H@Z
?close@ofstream@@QAEXXZ
?stdiofile@stdiobuf@@QAEPAU_iobuf@@XZ
opengl32
glGetTexGeniv
glAlphaFunc
glEdgeFlagPointer
glColor3f
glTexCoord2fv
glIndexs
glEdgeFlag
glEnd
glTexCoord4dv
glNewList
glNormalPointer
glTexEnviv
wglSwapMultipleBuffers
glMap2f
glEvalCoord1fv
glRasterPos4i
glTexGenfv
msvcp60
?norm@std@@YAMABV?$complex@M@1@@Z
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?infinity@?$numeric_limits@K@std@@SAKXZ
?decimal_point@?$numpunct@D@std@@QBEDXZ
?tellp@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE?AV?$fpos@H@2@XZ
?max@?$numeric_limits@M@std@@SAMXZ
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??1?$moneypunct@G$00@std@@UAE@XZ
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
?infinity@?$numeric_limits@N@std@@SANXZ
?do_is@?$ctype@G@std@@MBE_NFG@Z
?length@?$char_traits@G@std@@SAIPBG@Z
?cosh@std@@YA?AV?$complex@O@1@ABV21@@Z
??_F?$moneypunct@G$0A@@std@@QAEXXZ
??4?$numeric_limits@O@std@@QAEAAV01@ABV01@@Z
?xsgetn@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAEHPAGH@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IIABV12@II@Z
??Gstd@@YA?AV?$complex@N@0@ABV10@ABN@Z
?_Getcat@?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIXZ
?sqrt@std@@YA?AV?$complex@N@1@ABV21@@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?denorm_min@?$numeric_limits@H@std@@SAHXZ
??Nstd@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?capacity@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
kernel32
EnumCalendarInfoW
GlobalGetAtomNameW
GetTickCount
FileTimeToSystemTime
NlsGetCacheUpdateCount
DeleteAtom
GetTapeStatus
EndUpdateResourceA
GetCurrentProcessId
QueryPerformanceCounter
VirtualAlloc
GetCurrentThreadId
FindFirstChangeNotificationW
FindVolumeMountPointClose
GetConsoleAliasesLengthA
SetUnhandledExceptionFilter
Module32FirstW
Sections
.text Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 638B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ