Static task
static1
Behavioral task
behavioral1
Sample
b16a41ecb863f45f6ba90e3ec5bdd253_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b16a41ecb863f45f6ba90e3ec5bdd253_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b16a41ecb863f45f6ba90e3ec5bdd253_JaffaCakes118
-
Size
372KB
-
MD5
b16a41ecb863f45f6ba90e3ec5bdd253
-
SHA1
edec00fb544fbdc4e7b0238612a56a22d72e84ff
-
SHA256
a36c8b844bfd6a779556dfe52a98832710c711b555ded6ab6b1892d658eeda39
-
SHA512
f4ad1e9b638d8f153ceb8185b73787f1f016d2c31b4befebe209f0de397224693075e63b13ee11b9962a1642d593f5dfbb475274cdfb653f7853df1d4c538a02
-
SSDEEP
6144:GBK8YdiyA+YaUh03n6zcEjXiABsD5ltn1EW3xA9Z0hDShCE/RtwKxe:D8YdW9amu6zkasDfx1EWhA9ZE+CE/fwn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b16a41ecb863f45f6ba90e3ec5bdd253_JaffaCakes118
Files
-
b16a41ecb863f45f6ba90e3ec5bdd253_JaffaCakes118.exe windows:5 windows x86 arch:x86
fcb7225c2e3bea86b74df4c0f9585b2b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
msvcrt
_cputs
_strtoi64
_aligned_offset_realloc
_mbsnbcmp
_outp
atexit
_inpd
_isnan
rand
_fgetchar
_mbsnbcpy
_mbctokata
_ctime64
_adj_fdiv_m32
_wchdir
pow
_getdiskfree
_adj_fdiv_m64
isdigit
_adj_fdivr_m64
_dstbias
_getw
_ismbslead
_splitpath
_cputws
_wexecvp
strftime
_Gettnames
ctime
wcstombs
freopen
__threadid
_onexit
_ismbbprint
__crtCompareStringA
_seh_longjmp_unwind
??_V@YAXPAX@Z
??0bad_cast@@QAE@PBD@Z
_setmbcp
_mbsnbcoll
_wspawnl
_mbslen
??0exception@@QAE@XZ
mapi32
MAPIOpenLocalFormContainer
MAPIFreeBuffer@4
GetOutlookVersion
cmc_send
HrDecomposeMsgID@24
HrValidateParameters@8
MNLS_IsBadStringPtrW@8
cmc_query_configuration
MAPIAllocateBuffer
HrComposeEID@28
cmc_read
UlPropSize@4
MAPIAllocateMore@12
ScRelocNotifications@20
UNKOBJ_COFree@8
cmc_list
OpenTnefStream
LpValFindProp@12
CchOfEncoding@4
cmc_free
LPropCompareProp@8
FBadRow@4
FPropCompareProp@12
BuildDisplayTable@40
RTFSync
FDecodeID@12
MAPIOpenFormMgr
FBadProp@4
HrDispatchNotifications@4
UNKOBJ_ScCOAllocate@12
SzFindLastCh@8
MAPILogonEx
ScCountProps@12
BMAPIGetAddress
UlRelease@4
MNLS_MultiByteToWideChar@24
MAPIAllocateBuffer@8
kernel32
UnregisterWaitEx
VirtualLock
VirtualAlloc
GetCommandLineA
ScrollConsoleScreenBufferW
ReadConsoleW
DeviceIoControl
GetVolumeNameForVolumeMountPointW
SetComputerNameExA
AreFileApisANSI
LZDone
GetCurrentThread
GlobalMemoryStatusEx
LocalAlloc
ProcessIdToSessionId
GetCommTimeouts
LeaveCriticalSection
SetClientTimeZoneInformation
lstrlen
GetEnvironmentStringsW
TerminateThread
CreateTimerQueueTimer
EnumSystemLocalesA
WriteConsoleInputW
QueryDosDeviceW
HeapSummary
SetThreadAffinityMask
FillConsoleOutputAttribute
InterlockedFlushSList
GlobalUnlock
lstrlenW
BeginUpdateResourceA
LoadLibraryA
QueryPerformanceCounter
GetSystemPowerStatus
DebugBreakProcess
WriteConsoleOutputW
msvcirt
??0stdiostream@@QAE@ABV0@@Z
?setb@streambuf@@IAEXPAD0H@Z
??5istream@@QAEAAV0@P6AAAV0@AAV0@@Z@Z
??0ostrstream@@QAE@PADHH@Z
?sync_with_stdio@ios@@SAXXZ
??0ifstream@@QAE@H@Z
?sync@streambuf@@UAEHXZ
??_8ostrstream@@7B@
?setbuf@ofstream@@QAEPAVstreambuf@@PADH@Z
??_Eostream_withassign@@UAEPAXI@Z
??4ostream_withassign@@QAEAAV0@ABV0@@Z
??0strstreambuf@@QAE@PAEH0@Z
?clog@@3Vostream_withassign@@A
?peek@istream@@QAEHXZ
??_7filebuf@@6B@
??_Elogic_error@@UAEPAXI@Z
?setmode@fstream@@QAEHH@Z
??1exception@@UAE@XZ
??_Eios@@UAEPAXI@Z
?close@ifstream@@QAEXXZ
??4istream@@IAEAAV0@PAVstreambuf@@@Z
?seekoff@stdiobuf@@UAEJJW4seek_dir@ios@@H@Z
??0ostream_withassign@@QAE@PAVstreambuf@@@Z
??Bios@@QBEPAXXZ
??0stdiobuf@@QAE@PAU_iobuf@@@Z
?gptr@streambuf@@IBEPADXZ
??_7fstream@@6B@
??6ostream@@QAEAAV0@F@Z
??_Gifstream@@UAEPAXI@Z
?pbase@streambuf@@IBEPADXZ
??0ostream_withassign@@QAE@ABV0@@Z
?rdbuf@istrstream@@QBEPAVstrstreambuf@@XZ
??4ostream@@IAEAAV0@PAVstreambuf@@@Z
_mtlock
?fail@ios@@QBEHXZ
??5istream@@QAEAAV0@AAG@Z
??_8istream_withassign@@7B@
?x_lockc@ios@@0U_CRT_CRITICAL_SECTION@@A
?str@strstreambuf@@QAEPADXZ
?delbuf@ios@@QBEHXZ
?flags@ios@@QAEJJ@Z
??6ostream@@QAEAAV0@O@Z
_mtunlock
??4istream@@IAEAAV0@ABV0@@Z
??_7streambuf@@6B@
??_Eostrstream@@UAEPAXI@Z
??1ofstream@@UAE@XZ
?ends@@YAAAVostream@@AAV1@@Z
?freeze@strstreambuf@@QAEXH@Z
?is_open@ofstream@@QBEHXZ
??0streambuf@@QAE@ABV0@@Z
?writepad@ostream@@AAEAAV1@PBD0@Z
?put@ostream@@QAEAAV1@E@Z
??_Dostream_withassign@@QAEXXZ
??_7strstreambuf@@6B@
?clear@ios@@QAEXH@Z
??5istream@@QAEAAV0@AAC@Z
?ebuf@streambuf@@IBEPADXZ
??6ostream@@QAEAAV0@K@Z
?basefield@ios@@2JB
??1Iostream_init@@QAE@XZ
user32
PostQuitMessage
DefWindowProcW
RegisterClassW
clusapi
CreateClusterGroup
ClusterRegCloseKey
ClusterGroupGetEnumCount
OpenClusterGroup
GetNodeClusterState
ClusterRegGetKeySecurity
GetClusterGroupKey
GetClusterQuorumResource
GetClusterFromGroup
FailClusterResource
GetClusterResourceNetworkName
OpenClusterResource
ClusterRegSetValue
ClusterResourceTypeGetEnumCount
ClusterResourceGetEnumCount
ClusterGetEnumCount
GetClusterFromNode
SetClusterResourceName
GetClusterResourceState
GetClusterFromNetInterface
GetClusterResourceTypeKey
ClusterRegQueryInfoKey
ResumeClusterNode
EvictClusterNode
OfflineClusterGroup
SetClusterGroupName
ClusterRegOpenKey
ClusterNodeEnum
GetClusterNetInterfaceState
MoveClusterGroup
CloseClusterNode
ClusterRegSetKeySecurity
ClusterGroupEnum
ClusterResourceTypeControl
CloseCluster
OnlineClusterGroup
DeleteClusterResourceType
GetClusterNodeState
ClusterGroupOpenEnum
EvictClusterNodeEx
Sections
.text Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 519KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 182KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ