Static task
static1
Behavioral task
behavioral1
Sample
a848703ef6248cf562ee46f3f4f26f94_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a848703ef6248cf562ee46f3f4f26f94_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a848703ef6248cf562ee46f3f4f26f94_JaffaCakes118
-
Size
1.1MB
-
MD5
a848703ef6248cf562ee46f3f4f26f94
-
SHA1
5bdb6c3483cc8a8c563d695dd893955f20dfd5c4
-
SHA256
301defa7fd71e908adcccbb19f36f8fd7cc1f6b4a65b2f2d85bd4403510adfbb
-
SHA512
b84540a45e800f4110579bf208632aabb84d3c0f903c4392419f2f6914a84650dacc56d1e1dccbe25836eaf7bbe5119ff21d74d04bf6a48671b9adaf443091d5
-
SSDEEP
12288:wSVGWVzkrqPSFxsZQb8pkhXqCYX3N1usCMXT+gml2DiZAYY4wiM0/1KAIAH/MW/M:wUQkkhaL3qqXS34WYuftKAHJt7kgqSM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a848703ef6248cf562ee46f3f4f26f94_JaffaCakes118
Files
-
a848703ef6248cf562ee46f3f4f26f94_JaffaCakes118.exe windows:4 windows x86 arch:x86
182e87bdfc340d51718c6fa116ec2ce6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
magicshow
PlayFlashCenter
ord3
ord2
vhelp
_HCreateWinStyle@4
_HAttachWinStyle@8
mfc42
ord3749
ord5065
ord1727
ord5261
ord2446
ord5277
ord3402
ord4627
ord567
ord2135
ord818
ord1949
ord4034
ord2864
ord3706
ord5265
ord4376
ord4998
ord4710
ord6052
ord1775
ord5280
ord2124
ord4425
ord3597
ord656
ord324
ord2370
ord2294
ord2362
ord2302
ord4234
ord4853
ord6334
ord535
ord3610
ord665
ord354
ord941
ord2379
ord4284
ord2078
ord3092
ord6215
ord1768
ord5875
ord4129
ord5683
ord3177
ord3499
ord2515
ord355
ord323
ord640
ord283
ord472
ord2450
ord1640
ord3693
ord5785
ord2859
ord5450
ord6394
ord2841
ord5440
ord6383
ord2107
ord4396
ord3574
ord809
ord609
ord556
ord4275
ord6197
ord2567
ord2122
ord6358
ord1088
ord2860
ord2575
ord5787
ord5710
ord4278
ord1793
ord4160
ord4123
ord5781
ord3089
ord1168
ord2574
ord3572
ord940
ord2614
ord939
ord5856
ord4202
ord6199
ord755
ord470
ord4476
ord5981
ord3874
ord2863
ord2086
ord686
ord2243
ord2915
ord2448
ord5834
ord2044
ord6378
ord6380
ord795
ord616
ord4224
ord668
ord6376
ord2781
ord2770
ord356
ord922
ord2764
ord2820
ord926
ord1979
ord5773
ord3318
ord5442
ord5186
ord5572
ord2622
ord1206
ord1223
ord446
ord743
ord2727
ord6467
ord2730
ord2729
ord3353
ord3579
ord614
ord290
ord923
ord1862
ord816
ord5789
ord562
ord3920
ord2971
ord2380
ord4083
ord812
ord2763
ord559
ord5862
ord4220
ord2584
ord3654
ord2438
ord4277
ord2642
ord613
ord289
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord6779
ord6648
ord3742
ord1233
ord2152
ord6379
ord2358
ord6453
ord3721
ord2301
ord2566
ord2753
ord1802
ord3021
ord2405
ord2754
ord6021
ord5053
ord1180
ord2147
ord3797
ord5718
ord2393
ord1567
ord5232
ord1176
ord5788
ord4297
ord4133
ord533
ord5194
ord5465
ord798
ord1601
ord6143
ord6883
ord5861
ord6663
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord3738
ord4424
ord1776
ord4078
ord6055
ord1644
ord924
ord2514
ord823
ord6270
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord5302
ord5300
ord3346
ord858
ord6880
ord4299
ord1146
ord2725
ord3573
ord1134
ord2621
ord6117
ord296
ord5214
ord5500
ord6354
ord617
ord1200
ord2096
ord561
ord384
ord3181
ord815
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord641
ord4274
ord4673
ord3663
ord3626
ord2414
ord1641
ord2452
ord3571
ord537
ord2818
ord1175
ord860
ord540
ord800
ord825
ord268
ord1568
ord5268
ord1799
ord4226
ord4003
ord3619
ord1576
ord5873
msvcrt
wcscpy
malloc
fflush
_mbscmp
_access
_itoa
printf
rand
time
srand
memmove
toupper
_getcwd
_except_handler3
__dllonexit
_onexit
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
abs
_ftol
vsprintf
_CxxThrowException
_stricmp
free
atol
fseek
ftell
_mkdir
fprintf
strcat
strstr
atoi
_setmbcp
_initterm
__setusermatherr
_mbsrchr
fread
fwrite
_mbsicmp
strtok
strcmp
strrchr
strcpy
strlen
memcpy
fgets
sscanf
sprintf
fopen
fputs
fclose
strncpy
memset
_purecall
__CxxFrameHandler
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
?terminate@@YAXXZ
_CIpow
_mbsinc
localtime
_vsnprintf
_snprintf
atof
fputc
isalpha
isalnum
isspace
strncmp
strchr
tolower
_ltoa
_strdup
_unlink
_strnicmp
kernel32
MultiByteToWideChar
MulDiv
GetPrivateProfileStringA
WritePrivateProfileStringA
GetModuleHandleA
SetUnhandledExceptionFilter
IsDBCSLeadByte
GetTickCount
SetCurrentDirectoryA
GetModuleFileNameA
GetProcAddress
GetPrivateProfileIntA
LoadLibraryA
GetLastError
DeleteFileA
MoveFileA
OutputDebugStringA
FreeLibrary
GetCurrentProcess
OpenProcess
CloseHandle
lstrcpyA
GetCurrentProcessId
GetSystemDirectoryA
FindResourceA
LoadResource
LockResource
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalFree
GetVersionExA
FindFirstFileA
FindNextFileA
FindClose
RemoveDirectoryA
CreateDirectoryA
GetStartupInfoA
user32
MessageBoxA
GetCursorPos
DestroyIcon
CreatePopupMenu
GetWindowRect
EnableWindow
MoveWindow
LoadBitmapA
SetWindowLongA
GetWindowLongA
GetActiveWindow
UpdateWindow
IsWindowEnabled
InvertRect
PostMessageA
LoadCursorFromFileA
GetParent
TranslateMessage
DispatchMessageA
LoadStringA
ClientToScreen
CharNextA
CharPrevA
GetSubMenu
GetMenuItemID
GetMenuItemCount
DrawFrameControl
DrawEdge
GetMenuItemInfoA
DrawIconEx
GetSysColor
SetForegroundWindow
SetActiveWindow
FindWindowA
LoadCursorA
LoadImageA
SendMessageA
GetClientRect
EnumChildWindows
IsWindow
DrawTextW
GetDesktopWindow
GetFocus
IsWindowVisible
GetDC
SystemParametersInfoA
LoadIconA
IsIconic
GetSystemMenu
AppendMenuA
DrawIcon
GetSystemMetrics
GetKeyboardLayout
MapVirtualKeyExA
IsCharLowerA
MapVirtualKeyA
GetKeyNameTextA
FrameRect
InflateRect
ScreenToClient
SetCapture
ReleaseCapture
PtInRect
SetTimer
KillTimer
ReleaseDC
GetWindowDC
IntersectRect
EqualRect
InvalidateRect
FillRect
OffsetRect
SetCursor
SetWindowRgn
SetRect
CopyRect
GetClassNameA
gdi32
CreatePen
CreateDIBSection
DeleteObject
GetObjectA
CreateRectRgnIndirect
CombineRgn
CreateSolidBrush
DeleteDC
LineTo
MoveToEx
SelectObject
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetBkMode
CreateRectRgn
GetPixel
PtInRegion
CreateFontIndirectA
GetTextExtentPointA
CreateDIBitmap
CreateFontA
CreateBitmap
GetTextColor
Rectangle
PatBlt
OffsetRgn
CreatePatternBrush
CreatePolygonRgn
CreateRoundRectRgn
FillRgn
GetMapMode
ExtCreateRegion
GetTextExtentPoint32A
GetDIBits
SetBkMode
SetTextColor
GetTextMetricsA
CreateBrushIndirect
TextOutA
GetTextExtentPoint32W
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA
SHFileOperationA
comctl32
_TrackMouseEvent
ImageList_GetIcon
ImageList_AddMasked
ole32
CoCreateInstance
CoUninitialize
CoInitialize
CLSIDFromProgID
CLSIDFromString
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
msvcp60
??_7?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
?_Mode@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEHH@Z
?_Init@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEXPBDIH@Z
??_7?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??0ios_base@std@@IAE@XZ
??_8?$basic_ofstream@DU?$char_traits@D@std@@@std@@7B@
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??_7?$basic_ostream@DU?$char_traits@D@std@@@std@@6B@
??1?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Init@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@12@@Z
?str@?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
?str@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Initcvt@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?__Fiopen@std@@YAPAU_iobuf@@PBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??_D?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_7?$basic_istream@DU?$char_traits@D@std@@@std@@6B@
?_Tidy@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEXXZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??_7?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??_8?$basic_istringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B@
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?_Xlen@std@@YAXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAM@Z
??_8?$basic_ostringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B@
?clear@ios_base@std@@QAEXH_N@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??_7?$basic_ofstream@DU?$char_traits@D@std@@@std@@6B@
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
ddraw
DirectDrawCreate
winmm
timeGetTime
PlaySoundA
shlwapi
PathFileExistsA
wsock32
gethostname
gethostbyname
ntohl
ntohs
htonl
htons
inet_addr
msimg32
AlphaBlend
advapi32
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegCreateKeyA
oleaut32
SysFreeString
Sections
.text Size: 628KB - Virtual size: 626KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
BWU Size: 236KB - Virtual size: 236KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE