Static task
static1
Behavioral task
behavioral1
Sample
8a00df6164fa488be3e677d04003483e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
8a00df6164fa488be3e677d04003483e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
8a00df6164fa488be3e677d04003483e_JaffaCakes118
-
Size
112KB
-
MD5
8a00df6164fa488be3e677d04003483e
-
SHA1
654cabbe9008d53323364504ea034f19e321d6d7
-
SHA256
4670216304d3eb9c93ef54e703684e0e0a9d12e76d45d5852644181610bc43b8
-
SHA512
58d098bb7a61a4d633785b28f61570995c3614b676af9097d2e0c7c88b103706d929086d72641d66ba612ea176f1ee07c73854c444f54d5936ea3fac15a4b056
-
SSDEEP
3072:DLitJEL7qiSjhmmS52ASQhgK9nc1j7ijI5B3DBW3l:HMgqiA0mS2Q6KZEjhL96
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8a00df6164fa488be3e677d04003483e_JaffaCakes118
Files
-
8a00df6164fa488be3e677d04003483e_JaffaCakes118.exe windows:5 windows x86 arch:x86
41f551ee9441f3fbac26caab8bda0d14
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CancelTimerQueueTimer
ReadConsoleOutputAttribute
InterlockedExchangeAdd
LocalFree
HeapSize
VirtualAlloc
EnumTimeFormatsW
EnumCalendarInfoExW
HeapDestroy
IsValidLocale
GetPrivateProfileStringW
GetSystemDefaultLCID
GetEnvironmentStrings
MultiByteToWideChar
UTUnRegister
SetProcessWorkingSetSize
IsDebuggerPresent
WriteConsoleA
MulDiv
SetConsoleCursorInfo
WriteConsoleOutputAttribute
SetThreadIdealProcessor
HeapCompact
GetFirmwareEnvironmentVariableW
SetTimerQueueTimer
CallNamedPipeA
CreateWaitableTimerA
CreateHardLinkA
BaseUpdateAppcompatCache
HeapQueryInformation
CreateFileW
GetVolumeNameForVolumeMountPointW
IsValidCodePage
ReadConsoleOutputA
_hread
DosPathToSessionPathA
GetUserDefaultLCID
LoadLibraryA
SetCriticalSectionSpinCount
EnterCriticalSection
LeaveCriticalSection
VDMOperationStarted
DefineDosDeviceA
IsSystemResumeAutomatic
BackupRead
SetConsoleOS2OemFormat
GetCurrentProcessId
msvcp60
?pbackfail@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@MAEHH@Z
?get@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@PAGH@Z
??Nstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@0@Z
?id@?$codecvt@DDH@std@@2V0locale@2@A
_Poly
?_Mode@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEHH@Z
?pow@?$_Ctr@N@std@@SANNN@Z
??Y?$_Complex_base@M@std@@QAEAAV01@ABM@Z
?overflow@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@MAEHH@Z
?do_hash@?$collate@D@std@@MBEJPBD0@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?max@?$numeric_limits@M@std@@SAMXZ
?_Nomemory@std@@YAXXZ
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
?get@?$messages@D@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@HHHABV32@@Z
??0time_base@std@@QAE@I@Z
??0ostrstream@std@@QAE@PADHH@Z
??0?$moneypunct@D$00@std@@QAE@ABV_Locinfo@1@I@Z
??4?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??_F?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
_LDscale
?flush@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@1@AAV21@@Z
?_Doraise@bad_exception@std@@MBEXXZ
?eq_int_type@?$char_traits@D@std@@SA_NABH0@Z
?id@?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@2V0locale@2@A
??0?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAE@W4_Uninitialized@1@@Z
??_8?$basic_ostream@GU?$char_traits@G@std@@@std@@7B@
?tolower@?$ctype@G@std@@QBEPBGPAGPBG@Z
?write@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV12@PBGH@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??_7?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??1?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@UAE@XZ
??1?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??_7?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@6B@
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGIABV?$allocator@G@1@@Z
?min@?$numeric_limits@_N@std@@SA_NXZ
??4?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAEAAV01@ABV01@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?min@?$numeric_limits@O@std@@SAOXZ
?_Getdays@_Locinfo@std@@QBEPBDXZ
??0?$time_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@I@Z
?_Doraise@logic_error@std@@MBEXXZ
?seekpos@strstreambuf@std@@MAE?AV?$fpos@H@2@V32@H@Z
??Kstd@@YA?AV?$complex@N@0@ABV10@ABN@Z
??_D?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
??0?$complex@O@std@@QAE@ABV?$complex@N@1@@Z
?_Nanv@?$_Ctr@N@std@@SANN@Z
??0?$money_get@DV?$istreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
?sync@?$basic_filebuf@GU?$char_traits@G@std@@@std@@MAEHXZ
?do_toupper@?$ctype@G@std@@MBEGG@Z
?quiet_NaN@?$numeric_limits@E@std@@SAEXZ
??0?$num_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
??4_Timevec@std@@QAEAAV01@ABV01@@Z
?overflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?resize@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXI@Z
?copyfmt@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEAAV12@ABV12@@Z
?do_max_length@?$codecvt@GDH@std@@MBEHXZ
??_D?$basic_istream@GU?$char_traits@G@std@@@std@@QAEXXZ
?hash@?$collate@G@std@@QBEJPBG0@Z
??8std@@YA_NABMABV?$complex@M@0@@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAJ@Z
_FEps
??8std@@YA_NABV?$complex@M@0@0@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?getline@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@PAGH@Z
?_Init@?$ctype@D@std@@IAEXABV_Locinfo@2@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_N@Z
wcsrtombs
??1messages_base@std@@UAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?infinity@?$numeric_limits@_N@std@@SA_NXZ
?do_always_noconv@codecvt_base@std@@MBE_NXZ
?quiet_NaN@?$numeric_limits@D@std@@SADXZ
??0locale@std@@QAE@PBDH@Z
?swap@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXAAV12@@Z
?opfx@?$basic_ostream@GU?$char_traits@G@std@@@std@@QAE_NXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0runtime_error@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@@Z
?replace@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PAG0PBGI@Z
?frac_digits@?$_Mpunct@G@std@@QBEHXZ
?seekpos@?$basic_streambuf@GU?$char_traits@G@std@@@std@@MAE?AV?$fpos@H@2@V32@H@Z
user32
GetDialogBaseUnits
CharLowerA
EnableMenuItem
GetMenuCheckMarkDimensions
CharLowerBuffA
SetWindowsHookExW
DlgDirSelectComboBoxExW
KillTimer
IsCharAlphaA
LoadImageA
GetSubMenu
GetKeyboardLayoutNameW
GetWindow
EnumDisplaySettingsExW
SendMessageCallbackA
DlgDirListComboBoxW
CharNextExA
DestroyCursor
GrayStringA
GetClipboardData
CreateMDIWindowW
User32InitializeImmEntryTable
UnregisterClassW
SetTaskmanWindow
ReleaseCapture
DrawFrameControl
DefWindowProcW
lz32
LZCreateFileW
LZCloseFile
CopyLZFile
LZClose
LZRead
LZOpenFileW
LZDone
LZOpenFileA
LZStart
GetExpandedNameW
LZSeek
LZCopy
GetExpandedNameA
LZInit
msvcrt
exit
__set_app_type
__getmainargs
__p__commode
Sections
.text Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 27KB - Virtual size: 217KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ