Static task
static1
Behavioral task
behavioral1
Sample
93db7d7550df6d3b71d81cb442c8cf0f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
93db7d7550df6d3b71d81cb442c8cf0f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
93db7d7550df6d3b71d81cb442c8cf0f_JaffaCakes118
-
Size
57KB
-
MD5
93db7d7550df6d3b71d81cb442c8cf0f
-
SHA1
d1aaf99d32c1fc33b4488beb4af4b503f2f92bc6
-
SHA256
2c35e2be9661b3850ca3e35c59da696cb3365aff2bef6588f710e651ca2b0cb8
-
SHA512
caabecfd38eca6a8a41218d8fb0a4be19a4e3b35a5ac09840d8286f08709d26fd7ed550bcd7cf36d1a84b88a605988e3d7ab9fd82252bd56076ffd47ad3d5fe6
-
SSDEEP
1536:grWO+QhJgbav8a43qAaWbJ/C/zgVGVhzAEwrg:grWOLgbav8a463WbJ/czgEVhzAEwrg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 93db7d7550df6d3b71d81cb442c8cf0f_JaffaCakes118
Files
-
93db7d7550df6d3b71d81cb442c8cf0f_JaffaCakes118.exe windows:4 windows x86 arch:x86
a1dc642bc2d4331c19c795a6f2e5c073
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
libopenfoam
_ZN4Foam10FatalErrorE
_ZN4Foam10SLListBase6appendEPNS0_4linkE
_ZN4Foam11mergePointsERKNS_5UListINS_6VectorIdEEEEdbRNS_4ListIiEERNS6_IS2_EERKS2_
_ZN4Foam12cellModeller6lookupERKNS_4wordE
_ZN4Foam13messageStreamclEPKcS2_i
_ZN4Foam13messageStreamcvRNS_8OSstreamEEv
_ZN4Foam13wallPolyPatch8typeNameE
_ZN4Foam4InfoE
_ZN4Foam4Time15controlDictNameE
_ZN4Foam4TimeC1ERKNS_4wordERKNS_8fileNameES6_S3_S3_
_ZN4Foam4TimeD1Ev
_ZN4Foam4word5debugE
_ZN4Foam5error4exitEi
_ZN4Foam5error5abortEv
_ZN4Foam5errorclEPKcS2_i
_ZN4Foam6HasherEPKvjj
_ZN4Foam6VectorIdE4zeroE
_ZN4Foam6string14removeRepeatedEc
_ZN4Foam6string14removeTrailingEc
_ZN4Foam7WarningE
_ZN4Foam7argList10noParallelEv
_ZN4Foam7argList12validOptionsE
_ZN4Foam7argList9validArgsE
_ZN4Foam7argListC1ERiRPPcbb
_ZN4Foam7argListD1Ev
_ZN4Foam8IFstreamC1ERKNS_8fileNameENS_8IOstream12streamFormatENS4_13versionNumberE
_ZN4Foam8IFstreamD1Ev
_ZN4Foam8IOobjectC1ERKNS_4wordERKNS_8fileNameERKNS_14objectRegistryENS0_10readOptionENS0_11writeOptionEb
_ZN4Foam8IOobjectD1Ev
_ZN4Foam8IOstream10precision_E
_ZN4Foam8IOstream14currentVersionE
_ZN4Foam8IOstream5name_E
_ZN4Foam8fileName5debugE
_ZN4Foam8polyMesh13defaultRegionE
_ZN4Foam8polyMeshC1ERKNS_8IOobjectERKNS_4XferINS_5FieldINS_6VectorIdEEEEEERKNS_4ListINS_9cellShapeEEERKNSC_INSC_INS_4faceEEEEERKNSC_INS_4wordEEESP_RKSM_SR_SP_b
_ZN4Foam8polyMeshD1Ev
_ZN4Foam9cellShape8collapseEv
_ZN4FoamlsERNS_7OstreamEPKc
_ZN4FoamlsERNS_7OstreamERKNS_4wordE
_ZN4FoamlsERNS_7OstreamERKNS_5token16punctuationTokenE
_ZN4FoamlsERNS_7OstreamEc
_ZN4FoamlsERNS_7OstreamEd
_ZN4FoamlsERNS_7OstreamEi
_ZN4FoamrsERNS_7IstreamERd
_ZN4FoamrsERNS_7IstreamERi
_ZNK4Foam11regIOobject5writeEv
_ZNK4Foam4face11reverseFaceEv
_ZNK4Foam7argList14additionalArgsEv
_ZNK4Foam7argList5checkEbb
_ZNK4Foam8IOstream5checkEPKc
_ZNK4Foam8IOstream5printERNS_7OstreamE
_ZTVN4Foam13IStringStreamE
_ZTVN4Foam8IOstreamE
_ZTVN4Foam8ISstreamE
_ZN4Foam4InfoE
_ZN4Foam4InfoE
_ZN4Foam4InfoE
_ZN4Foam4InfoE
_ZN4Foam4InfoE
_ZN4Foam4InfoE
_ZN4Foam4InfoE
_ZN4Foam4InfoE
_ZN4Foam4InfoE
_ZN4Foam4InfoE
_ZN4Foam4InfoE
_ZN4Foam4InfoE
_ZN4Foam4InfoE
_ZN4Foam4InfoE
_ZN4Foam4InfoE
_ZN4Foam4InfoE
_ZN4Foam4InfoE
_ZN4Foam4InfoE
_ZN4Foam4InfoE
_ZN4Foam4InfoE
_ZN4Foam4InfoE
_ZN4Foam4InfoE
_ZN4Foam7WarningE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam10FatalErrorE
_ZN4Foam8IOstream5name_E
_ZN4Foam8IOstream5name_E
_ZTVN4Foam8IOstreamE
_ZTVN4Foam8IOstreamE
_ZTVN4Foam8IOstreamE
_ZTVN4Foam8IOstreamE
_ZTVN4Foam8IOstreamE
_ZTVN4Foam8IOstreamE
_ZTVN4Foam8IOstreamE
_ZTVN4Foam8IOstreamE
_ZTVN4Foam8IOstreamE
_ZTVN4Foam8IOstreamE
_ZN4Foam4word5debugE
_ZN4Foam4word5debugE
_ZN4Foam8fileName5debugE
_ZN4Foam8fileName5debugE
_ZN4Foam8fileName5debugE
_ZN4Foam8fileName5debugE
_ZTVN4Foam8ISstreamE
_ZTVN4Foam8ISstreamE
_ZTVN4Foam8ISstreamE
_ZTVN4Foam8ISstreamE
_ZTVN4Foam13IStringStreamE
_ZTVN4Foam13IStringStreamE
_ZTVN4Foam13IStringStreamE
_ZN4Foam8IOstream14currentVersionE
_ZN4Foam8IOstream14currentVersionE
_ZN4Foam8IOstream14currentVersionE
_ZN4Foam8IOstream14currentVersionE
_ZN4Foam8IOstream14currentVersionE
_ZN4Foam8IOstream14currentVersionE
_ZN4Foam8IOstream14currentVersionE
_ZN4Foam7argList9validArgsE
_ZN4Foam7argList12validOptionsE
_ZN4Foam7argList12validOptionsE
_ZN4Foam7argList12validOptionsE
_ZN4Foam7argList12validOptionsE
_ZN4Foam4Time15controlDictNameE
_ZN4Foam6VectorIdE4zeroE
_ZN4Foam13wallPolyPatch8typeNameE
_ZN4Foam8polyMesh13defaultRegionE
_ZN4Foam8IOstream10precision_E
libgcc_s_sjlj-1
_Unwind_SjLj_Register
_Unwind_SjLj_Resume
_Unwind_SjLj_Unregister
kernel32
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
exit
fprintf
free
fwrite
malloc
memcmp
memcpy
signal
sqrt
strlen
vfprintf
libstdc++-6
_ZNKSt5ctypeIcE13_M_widen_initEv
_ZNSo3putEc
_ZNSo5flushEv
_ZNSolsEi
_ZNSs12_M_leak_hardEv
_ZNSs4_Rep10_M_destroyERKSaIcE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs6assignERKSs
_ZNSs6resizeEjc
_ZNSsC1EPKcjRKSaIcE
_ZNSsC2EPKcRKSaIcE
_ZNSsC2ERKSs
_ZNSsD1Ev
_ZNSsD2Ev
_ZNSt15basic_stringbufIcSt11char_traitsIcESaIcEE7_M_syncEPcjj
_ZNSt6localeC1Ev
_ZNSt6localeD1Ev
_ZNSt8ios_base4InitC1Ev
_ZNSt8ios_base4InitD1Ev
_ZNSt8ios_baseC2Ev
_ZNSt8ios_baseD2Ev
_ZNSt9basic_iosIcSt11char_traitsIcEE4initEPSt15basic_streambufIcS1_E
_ZNSt9basic_iosIcSt11char_traitsIcEE5clearESt12_Ios_Iostate
_ZSt16__ostream_insertIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_PKS3_i
_ZSt16__throw_bad_castv
_ZSt4cerr
_ZSt4endlIcSt11char_traitsIcEERSt13basic_ostreamIT_T0_ES6_
_ZStlsISt11char_traitsIcEERSt13basic_ostreamIcT_ES5_PKc
_ZTISi
_ZTISt19basic_istringstreamIcSt11char_traitsIcESaIcEE
_ZTTSt19basic_istringstreamIcSt11char_traitsIcESaIcEE
_ZTVN10__cxxabiv117__class_type_infoE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVSt15basic_streambufIcSt11char_traitsIcEE
_ZTVSt15basic_stringbufIcSt11char_traitsIcESaIcEE
_ZTVSt19basic_istringstreamIcSt11char_traitsIcESaIcEE
_ZTVSt9basic_iosIcSt11char_traitsIcEE
_ZdaPv
_ZdlPv
_Znaj
_Znwj
__cxa_bad_cast
__cxa_pure_virtual
__dynamic_cast
__gxx_personality_sj0
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZNSs4_Rep20_S_empty_rep_storageE
_ZSt4cerr
_ZSt4cerr
_ZSt4cerr
_ZSt4cerr
_ZSt4cerr
_ZSt4cerr
_ZSt4cerr
_ZSt4cerr
_ZSt4cerr
_ZSt4cerr
_ZSt4cerr
_ZSt4cerr
_ZSt4cerr
_ZSt4cerr
_ZSt4cerr
_ZSt4cerr
_ZSt4cerr
_ZSt4cerr
_ZSt4cerr
_ZSt4cerr
_ZSt4cerr
_ZSt4cerr
_ZSt4cerr
_ZSt4cerr
_ZSt4cerr
_ZTISt19basic_istringstreamIcSt11char_traitsIcESaIcEE
_ZTISi
_ZTVSt15basic_stringbufIcSt11char_traitsIcESaIcEE
_ZTVSt15basic_stringbufIcSt11char_traitsIcESaIcEE
_ZTVSt15basic_stringbufIcSt11char_traitsIcESaIcEE
_ZTVSt15basic_streambufIcSt11char_traitsIcEE
_ZTVSt15basic_streambufIcSt11char_traitsIcEE
_ZTVSt15basic_streambufIcSt11char_traitsIcEE
_ZTVSt15basic_streambufIcSt11char_traitsIcEE
_ZTVSt15basic_streambufIcSt11char_traitsIcEE
_ZTTSt19basic_istringstreamIcSt11char_traitsIcESaIcEE
_ZTTSt19basic_istringstreamIcSt11char_traitsIcESaIcEE
_ZTTSt19basic_istringstreamIcSt11char_traitsIcESaIcEE
_ZTTSt19basic_istringstreamIcSt11char_traitsIcESaIcEE
_ZTTSt19basic_istringstreamIcSt11char_traitsIcESaIcEE
_ZTTSt19basic_istringstreamIcSt11char_traitsIcESaIcEE
_ZTTSt19basic_istringstreamIcSt11char_traitsIcESaIcEE
_ZTTSt19basic_istringstreamIcSt11char_traitsIcESaIcEE
_ZTTSt19basic_istringstreamIcSt11char_traitsIcESaIcEE
_ZTVSt9basic_iosIcSt11char_traitsIcEE
_ZTVSt9basic_iosIcSt11char_traitsIcEE
_ZTVSt9basic_iosIcSt11char_traitsIcEE
_ZTVSt9basic_iosIcSt11char_traitsIcEE
_ZTVSt19basic_istringstreamIcSt11char_traitsIcESaIcEE
_ZTVSt19basic_istringstreamIcSt11char_traitsIcESaIcEE
_ZTVSt19basic_istringstreamIcSt11char_traitsIcESaIcEE
_ZTVSt19basic_istringstreamIcSt11char_traitsIcESaIcEE
_ZTVN10__cxxabiv120__si_class_type_infoE
_ZTVN10__cxxabiv117__class_type_infoE
Sections
.text Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 400B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE