Static task
static1
Behavioral task
behavioral1
Sample
8b08821cf663c57c56b446df86a2a7be_JaffaCakes118.exe
Resource
win7-20240729-en
General
-
Target
8b08821cf663c57c56b446df86a2a7be_JaffaCakes118
-
Size
309KB
-
MD5
8b08821cf663c57c56b446df86a2a7be
-
SHA1
769325404ebed493afcf70abcef2e5667922a91c
-
SHA256
78e3f79f31c33a96633db92cf1aec8c43c8785bf962b098890eb1adeaaebfc8e
-
SHA512
8744707175d7464a8d04f7c11f9752fa7e9c1e0bea9ef646e6c0f3296117a937e012740c08adc998f2d4c0b5a73cbfa7b2ac26bb13795a61d94879fa55ce4ab5
-
SSDEEP
6144:pxNEPtda4WDYyC5mRpMXin20SACqWJBXp81BRr:y3yCYRd20SXfXSF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8b08821cf663c57c56b446df86a2a7be_JaffaCakes118
Files
-
8b08821cf663c57c56b446df86a2a7be_JaffaCakes118.exe windows:4 windows x86 arch:x86
bd1a19a34f4229639986c9fdf2c2f80a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcessHeap
HeapFree
DeviceIoControl
EnterCriticalSection
LeaveCriticalSection
FindClose
GetLocaleInfoA
GetUserDefaultLCID
WritePrivateProfileStringA
lstrcmpiA
GetLastError
GetModuleFileNameA
WideCharToMultiByte
CreateFileA
CreateFileW
FreeLibrary
HeapSize
LoadLibraryA
CloseHandle
FlushFileBuffers
WriteFile
GetTempFileNameA
ReadFile
GetFileSize
SetFilePointer
GetVersionExA
SetLastError
DuplicateHandle
SetEndOfFile
lstrcpyA
GetPrivateProfileIntA
GetModuleHandleA
GetVersionExW
MultiByteToWideChar
VirtualProtect
lstrlenW
DeleteCriticalSection
InitializeCriticalSection
HeapDestroy
lstrlenA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetProcAddress
GetStartupInfoA
user32
EnableWindow
wsprintfA
GetDlgItem
LoadStringA
LoadStringW
CheckDlgButton
CharNextA
advapi32
RegCreateKeyExA
CryptReleaseContext
RegCloseKey
RegOpenKeyExW
RegEnumKeyExW
RegQueryValueExW
CryptHashData
CryptGetHashParam
CryptDestroyHash
RegCreateKeyA
RegSetValueExA
CryptCreateHash
ole32
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemRealloc
msvcrt
realloc
wcslen
memmove
_CIpow
wcsncmp
wcsstr
_exit
_XcptFilter
exit
_acmdln
__getmainargs
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
wcspbrk
towupper
_vsnwprintf
free
wcschr
__dllonexit
_onexit
_except_handler3
time
__CxxFrameHandler
??3@YAXPAX@Z
_initterm
msvcp60
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??Ostd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 287KB - Virtual size: 572KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ