Static task
static1
Behavioral task
behavioral1
Sample
8d4846958b7fb0a2098150639675d399_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
8d4846958b7fb0a2098150639675d399_JaffaCakes118
-
Size
269KB
-
MD5
8d4846958b7fb0a2098150639675d399
-
SHA1
752360af94c9d8365ca6f08b31de636fd81aa4d8
-
SHA256
185bff7792289984f27668880c2a0e370c1f9835da1064593fbd8a9198637037
-
SHA512
7328b46a84c9dde5661b822a23af2f92535a1aa45a4c488ecddd51c314ce3ee6e7b3c366efe49acd44dd57f4c2a3997b3215ace4e1f7ed92ab1daad0815d25b9
-
SSDEEP
6144:z6ABWw6K4bAqR9qun8w/LJTq32o/4GgLF03:z6eJ4bAqrvnxdO32s1qW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8d4846958b7fb0a2098150639675d399_JaffaCakes118
Files
-
8d4846958b7fb0a2098150639675d399_JaffaCakes118.exe windows:4 windows x86 arch:x86
8cf9ded589fa88e27d598a89ef2ae7d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
CloseHandle
CreateFileW
LoadLibraryW
GetProcAddress
RaiseException
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
InitializeCriticalSection
GetVersion
ReadFile
ExitProcess
TerminateProcess
GetCurrentProcess
TlsSetValue
TlsFree
GlobalFree
GlobalLock
GlobalAlloc
GlobalReAlloc
GetModuleHandleA
IsBadWritePtr
GetModuleHandleW
GetLocaleInfoA
WideCharToMultiByte
HeapFree
HeapCreate
HeapAlloc
GetLastError
LocalAlloc
LockResource
InterlockedExchange
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
VirtualProtect
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LocalFree
LoadResource
FindResourceW
TlsAlloc
GetStartupInfoA
user32
KillTimer
SetWindowPos
RegisterClassW
IsWindow
DestroyWindow
CreateWindowExW
LoadCursorW
SetWindowLongW
InvalidateRect
DefWindowProcW
GetDC
ReleaseDC
SetTimer
GetWindowLongW
BeginPaint
GetSysColor
EndPaint
UpdateWindow
advapi32
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
gdi32
BitBlt
StretchDIBits
SetStretchBltMode
CreateDIBSection
SelectPalette
GetPaletteEntries
DeleteObject
CreateCompatibleDC
RealizePalette
DeleteDC
GetObjectW
CreatePalette
GetSystemPaletteEntries
GetDeviceCaps
CreateHalftonePalette
GetNearestPaletteIndex
SelectObject
ole32
GetClassFile
CoCreateInstance
CoTaskMemFree
StringFromCLSID
CoFreeUnusedLibraries
msvcrt
??3@YAXPAX@Z
__CxxFrameHandler
time
_except_handler3
_adjust_fdiv
_initterm
free
_XcptFilter
memset
_wcsicmp
wcsrchr
wcslen
_itow
wcscpy
wcscat
swprintf
__dllonexit
_onexit
_exit
exit
_acmdln
__getmainargs
__setusermatherr
__p__commode
__p__fmode
__set_app_type
_controlfp
msvcp60
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??Ostd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 223KB - Virtual size: 445KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ