Static task
static1
Behavioral task
behavioral1
Sample
a429309b0a3a364cb215fb4f6a36313e_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a429309b0a3a364cb215fb4f6a36313e_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a429309b0a3a364cb215fb4f6a36313e_JaffaCakes118
-
Size
467KB
-
MD5
a429309b0a3a364cb215fb4f6a36313e
-
SHA1
7bfbc23d10529a67e472e6596fcf95b550afff69
-
SHA256
88adbb32826d7d1e832a116e5b0be35fc7d8e2d5d8d1ccbc1c6bca0e8d481b97
-
SHA512
d94e1aaecb4a502566f4668178c9b2564878320657e5ae9cf95773c1cf959a9e15e1e591494b4f8ee7835dc46074b76cace258af821ad57b5a1144b461754c1a
-
SSDEEP
6144:A9r5TL0pEm6pxKhmklnpXbNPME7CW8Fde2l+vudS1cvMfzgyxLn7EW+aFjQ3IU:85T9muQpp50LPNsmdSmMfz5L7Eo+v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a429309b0a3a364cb215fb4f6a36313e_JaffaCakes118
Files
-
a429309b0a3a364cb215fb4f6a36313e_JaffaCakes118.exe windows:4 windows x86 arch:x86
2eb9092e69c718e0145e420fd0b0bbcd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
PlaySoundW
mfc42u
ord354
ord6211
ord861
ord860
ord6374
ord6193
ord6376
ord809
ord556
ord1197
ord858
ord4124
ord5679
ord5706
ord2755
ord4272
ord2756
ord5568
ord2910
ord2385
ord537
ord2116
ord3605
ord656
ord4270
ord5871
ord2444
ord3568
ord3566
ord1143
ord4269
ord6371
ord4480
ord2546
ord2504
ord5727
ord3917
ord1089
ord5193
ord2388
ord3341
ord5296
ord5298
ord4074
ord4692
ord5303
ord5710
ord4616
ord3733
ord815
ord561
ord2506
ord617
ord6350
ord5496
ord5208
ord296
ord2613
ord4294
ord1202
ord641
ord609
ord3614
ord2717
ord925
ord927
ord5180
ord6654
ord6865
ord5285
ord5261
ord4370
ord4847
ord4992
ord6048
ord1767
ord5276
ord4419
ord3592
ord324
ord6195
ord3087
ord4704
ord4229
ord1165
ord2294
ord4155
ord755
ord470
ord6597
ord4279
ord4470
ord6330
ord6279
ord6278
ord3871
ord5977
ord2114
ord2631
ord2858
ord2371
ord2567
ord4390
ord3569
ord446
ord743
ord1634
ord3658
ord3621
ord3701
ord2406
ord2859
ord4029
ord3574
ord3348
ord2721
ord2722
ord6466
ord2719
ord3998
ord4221
ord290
ord2614
ord614
ord1791
ord1941
ord818
ord2127
ord567
ord4418
ord4621
ord665
ord5438
ord4075
ord3313
ord5769
ord1971
ord6354
ord4273
ord1761
ord3074
ord3820
ord3826
ord3825
ord3397
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5273
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord5286
ord4347
ord6370
ord5157
ord2377
ord5237
ord4401
ord1768
ord4073
ord6051
ord1088
ord538
ord6174
ord1172
ord540
ord2810
ord3806
ord2813
ord535
ord823
ord800
ord825
ord1131
ord1569
msvcrt
_controlfp
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
_stricmp
_snprintf
strncpy
wcstok
swprintf
free
malloc
fabs
srand
sprintf
atof
strcmp
fgets
strtok
strcpy
_wtoi
time
fputs
strlen
memcpy
fread
atoi
fclose
rand
atan2
abs
sqrt
pow
log10
wcsncpy
_purecall
_wcsicmp
sin
cos
wcscmp
memset
wcsrchr
_wfopen
fseek
ftell
memmove
strrchr
localtime
_vsnprintf
fprintf
isalpha
isalnum
isspace
strncmp
strchr
tolower
wcslen
fwrite
fflush
_snwprintf
_vsnwprintf
_ftol
__CxxFrameHandler
fopen
kernel32
FileTimeToSystemTime
FileTimeToLocalFileTime
GetProcessTimes
GetCurrentProcess
GetModuleFileNameW
GetModuleHandleW
WideCharToMultiByte
lstrcpynW
GetFileAttributesW
OutputDebugStringW
InitializeCriticalSection
DeleteCriticalSection
ResumeThread
CreateThread
Sleep
GetExitCodeThread
ExitThread
QueryPerformanceFrequency
QueryPerformanceCounter
LeaveCriticalSection
EnterCriticalSection
SetUnhandledExceptionFilter
GetProcAddress
LoadLibraryW
FreeLibrary
LoadLibraryA
SetCurrentDirectoryA
GetStartupInfoW
SetCurrentDirectoryW
MultiByteToWideChar
GetModuleFileNameA
GetPrivateProfileIntW
GlobalFree
GlobalUnlock
GlobalLock
GetTickCount
GlobalAlloc
user32
PostMessageW
SetRect
EnableWindow
MoveWindow
GetParent
GetClientRect
EnumChildWindows
GetClassNameW
DrawTextW
FillRect
LoadIconW
SetForegroundWindow
SetActiveWindow
SetTimer
IsWindowVisible
GetWindowRect
IsIconic
GetSystemMenu
AppendMenuW
LoadImageW
SetCursor
IsWindow
GetCursorPos
mouse_event
DrawIcon
GetSystemMetrics
SetCursorPos
LoadCursorFromFileW
GetDC
ReleaseDC
LoadCursorW
LoadBitmapW
FlashWindow
wsprintfW
MessageBoxW
SetCapture
SendMessageW
ReleaseCapture
ShowCursor
GetFocus
InvalidateRect
SetWindowRgn
CopyRect
gdi32
CreatePatternBrush
DeleteObject
CreateFontW
CreateSolidBrush
CombineRgn
CreateRectRgnIndirect
CreateFontA
BitBlt
DeleteDC
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
SetBkMode
SetTextColor
GetDIBits
GetObjectA
GetDeviceCaps
advapi32
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey
ole32
CoUninitialize
CoInitialize
CoCreateInstance
msvcp60
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV?$allocator@G@1@@Z
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
?empty@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE_NXZ
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@PBGI@Z
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??_8?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B@
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??_7?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
?_Tidy@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEXXZ
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?str@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?clear@ios_base@std@@QAEXH_N@Z
??1ios_base@std@@UAE@XZ
??_8?$basic_ofstream@DU?$char_traits@D@std@@@std@@7B@
??0ios_base@std@@IAE@XZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??_7?$basic_ofstream@DU?$char_traits@D@std@@@std@@6B@
??_8?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B@
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??_7?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
?_Mode@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEHH@Z
?_Init@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEXPBDIH@Z
??_7?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
localization
?Localization_Constant_GetString@@YAHPBG00PAGI@Z
?Localization_Start@@YAHPBG@Z
?Localization_Language_Add@@YAHPBG@Z
?Localization_Language_Remove@@YAHPBG@Z
?Localization_Language_Query@@YAHPBG@Z
?Localization_Language_Set@@YAHPBG@Z
?Localization_Language_Get@@YAHPAGI@Z
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
ddraw
DirectDrawCreate
Sections
.text Size: 344KB - Virtual size: 340KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE