Static task
static1
Behavioral task
behavioral1
Sample
c8cc2a6914e44f60f54ed9209e5e353d_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
c8cc2a6914e44f60f54ed9209e5e353d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
c8cc2a6914e44f60f54ed9209e5e353d_JaffaCakes118
-
Size
3.9MB
-
MD5
c8cc2a6914e44f60f54ed9209e5e353d
-
SHA1
e22284a09f8d3659aaf878fa26c6e007cd5df375
-
SHA256
57ce332f88b263e88643eada7af5e46104d66de6c115e92c343d29bb91612575
-
SHA512
e647cccfe9f16a0bd53b51a1f4475aae61d971a14b440d5289b567578e1b3fd796c41a482117f4c367877ff57e71e3dc4992946468ce70d7a161a77a86541192
-
SSDEEP
49152:2wVNM/IlcSsIccG2EVtobk1I/5ZP4vuHddtAA+rZwOOSPnlWIc/:2wVNbchto4+/5ZP4APO/NWIc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c8cc2a6914e44f60f54ed9209e5e353d_JaffaCakes118
Files
-
c8cc2a6914e44f60f54ed9209e5e353d_JaffaCakes118.exe windows:4 windows x86 arch:x86
c786d69402a1beb7e89f9ab2d693df11
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
htons
WSAGetLastError
gethostbyname
socket
setsockopt
ioctlsocket
WSACleanup
connect
closesocket
WSAStartup
select
__WSAFDIsSet
recv
inet_addr
send
ndsound
_DXSetSoundVolume@4
_DXSetMusicVolume@4
_DXSet2DSoundPos@12
_Check2DSound@4
_DXSetVolume@16
_DXClose2DSound@4
_DXPlayMedia@8
_DXCloseAllMedia@0
_DXCloseSound@12
_DXProcessSound@8
_DXSoundinit@4
_DXCloseAllSound@0
_DXDestroy@0
_DXGetSoundVolume@0
_DXGetMusicVolume@0
_DXPlaySound@24
dinput8
DirectInput8Create
roleview
RoleViewCreate
graphic
?GetScreenWidth@CMyBitmap@@SAHXZ
?ShowRect@CMyBitmap@@SAXHHHHK@Z
?Flip@CMyBitmap@@SAHPBUtagRECT@@0PAUHWND__@@@Z
?End3D@CMyBitmap@@SAHXZ
?ClearBuffer@CMyBitmap@@SAHHHK@Z
?Begin3D@CMyBitmap@@SAHXZ
?ResetDevice@CMyBitmap@@SAXXZ
?IfDeviceLost@CMyBitmap@@SAHXZ
?ShowString@CMyBitmap@@SAXHHKPBD0HH@Z
?GetFontSize@CMyBitmap@@SAXAAUCMySize@@@Z
?GetScreenHeight@CMyBitmap@@SAHXZ
?GetFontSize@CMyBitmap@@SAKXZ
?IsDBCSLeadByte@CMyBitmap@@SA_NPBDH@Z
?ShowTString@CMyBitmap@@SAXHHKPBDPADHH@Z
?ShowBlock@CMyBitmap@@SAXHHHHK@Z
?ShowLine@CMyBitmap@@SAXHHHHK@Z
?GameCameraSet@CMyBitmap@@SAXMMMK@Z
?GameCameraBuild@CMyBitmap@@SAXUCMySize@@@Z
?GameCameraCreate@CMyBitmap@@SAHXZ
?CheckStringPixels@CMyBitmap@@SA_NPBDK0H@Z
?ScreenShot@CMyBitmap@@SAXPBD@Z
?ShowBlock@CMyBitmap@@SAXHHHHKKKK@Z
?GetScreenSize@CMyBitmap@@SAXAAH0@Z
?GameFontCreate@CMyBitmap@@SAHXZ
?Init3DEx@CMyBitmap@@SAHPAUHWND__@@KKHK@Z
?GameCameraDestroy@CMyBitmap@@SAXXZ
BmpCreate
TargetBmpCreate
?FreeDataBuf@CMyBitmap@@SAXPAK@Z
?PrepareSprite@CMyBitmap@@SAXXZ
?PrepareLine@CMyBitmap@@SAXXZ
?ShowBlock@CMyBitmap@@SAXUCMyPos@@000K@Z
MultiBmpCreate
PuzzelTriangleCreate
PuzzelBlockCreate
gamedata
RoleDataQueryEx
TrimRight
RoleDataDestroyEx
RoleDataDestroy
RoleDataQuery
role3d
Simple3DObjCreate
Game3DEffectCreate
LoadAdjustConfig
graphicdata
GameDataSetQuery
GameDataSetDestroy
wininet
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
chat
ChaterInfoMgrQuery
assist
?CreateMonitorManager@@YAXXZ
?QueryMonitorManager@@YAPAVIMonitorManager@@XZ
imm32
ImmGetContext
ImmSetCompositionWindow
mfc42
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4424
ord3742
ord818
ord1146
ord1168
ord567
ord825
ord641
ord800
ord609
ord656
ord616
ord801
ord3626
ord3663
ord2414
ord692
ord4275
ord4299
ord6215
ord2086
ord6442
ord1233
ord5981
ord6197
ord2648
ord2379
ord6378
ord823
ord3873
ord6880
ord4123
ord2642
ord2078
ord5265
ord4376
ord4853
ord4998
ord2514
ord6052
ord1775
ord4425
ord3597
ord2302
ord2864
ord6199
ord3402
ord2135
ord1572
ord3876
ord5875
ord6778
ord6648
ord537
ord3706
ord1641
ord6283
ord6282
ord540
ord860
ord2575
ord4396
ord3574
ord324
ord4234
ord4476
ord2860
ord4710
ord6453
ord1768
ord5280
ord4538
ord3089
ord3610
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord3619
ord6779
ord2688
ord924
ord858
ord4129
ord5683
ord798
ord1997
ord6392
ord532
ord4034
ord4224
ord2915
ord4202
ord1175
ord6877
ord941
ord2818
ord640
ord2405
ord1640
ord323
ord3908
ord2859
ord3571
ord535
ord5710
ord541
ord6883
ord6143
ord3874
ord1771
ord6366
ord2413
ord2024
ord4219
ord2581
ord4401
ord3639
ord2099
ord3496
ord2370
ord6334
ord2362
ord6874
ord2763
ord6377
ord4284
ord4124
ord5148
ord3698
ord765
ord4673
ord4274
ord3573
ord815
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord5307
ord4622
ord3738
ord561
ord2621
ord2820
ord3790
ord1134
ord2764
ord2725
ord5714
ord5289
ord2645
ord1200
ord755
ord470
ord3721
ord795
ord1949
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord6379
ord1576
msvcrt
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
atol
_exit
atof
_ui64toa
strncat
strtol
_i64toa
_atoi64
strchr
strncpy
atoi
sprintf
_purecall
__CxxFrameHandler
??1type_info@@UAE@XZ
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
malloc
_splitpath
_endthreadex
_strcmpi
memchr
localtime
_mkdir
fseek
fscanf
mktime
gmtime
_mbsnbcat
_strdup
_strrev
free
vsprintf
_strlwr
_snprintf
exit
_beginthreadex
fprintf
fwrite
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
time
ctime
_stricmp
_ltoa
_strnicmp
_mbscmp
ceil
_strnset
strrchr
fread
srand
rand
_CxxThrowException
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
fopen
sscanf
fgets
fclose
memmove
_CIpow
strncmp
_ftol
_itoa
_filelength
_fileno
_setmbcp
strstr
kernel32
GetProcAddress
ReadProcessMemory
WriteProcessMemory
FindResourceA
LoadResource
LoadLibraryA
Sleep
OutputDebugStringA
CreateDirectoryA
WritePrivateProfileStructA
WritePrivateProfileSectionA
GetTickCount
DeleteFileA
CreateFileA
GetFileSize
GlobalAlloc
GlobalLock
GetSystemDirectoryA
FreeLibrary
LockResource
SizeofResource
_lclose
_lopen
IsDebuggerPresent
CreateProcessA
GetCurrentThreadId
WaitForSingleObject
GetCurrentProcessId
GetSystemTime
IsDBCSLeadByte
MulDiv
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapValidate
IsBadCodePtr
FindClose
FindNextFileA
FindFirstFileA
lstrcpynA
GetModuleHandleA
IsBadReadPtr
Process32Next
Process32First
CreateToolhelp32Snapshot
Thread32Next
Thread32First
OpenProcess
GetStartupInfoA
GlobalReAlloc
CloseHandle
ReleaseMutex
GetLastError
CreateMutexA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetPrivateProfileIntA
CopyFileA
GetPrivateProfileStringA
WritePrivateProfileStringA
ReadFile
GlobalFree
GlobalUnlock
GetModuleFileNameA
user32
RedrawWindow
GetDC
SetParent
GetKeyboardState
IsWindow
keybd_event
GetWindowLongA
WindowFromPoint
EnumChildWindows
MessageBoxA
LoadStringA
ChangeDisplaySettingsA
PostQuitMessage
EnumDisplaySettingsA
DrawIcon
GetSystemMetrics
GetForegroundWindow
FillRect
FindWindowA
SetWindowsHookExA
UnhookWindowsHookEx
DestroyCursor
IntersectRect
GetWindow
GetWindowTextA
InvalidateRect
EnumThreadWindows
OffsetRect
SendMessageA
LoadCursorA
GetWindowRect
EnableWindow
LoadIconA
BringWindowToTop
LoadImageA
SetCursor
KillTimer
GetKeyState
UnionRect
ReleaseCapture
SetCapture
SetWindowRgn
GetFocus
IsWindowVisible
BeginPaint
EndPaint
IsIconic
GetClientRect
SetTimer
GetParent
GetCursorPos
GetClassNameA
SetCursorPos
ScreenToClient
PtInRect
ClientToScreen
CallWindowProcA
SetWindowPos
SetWindowLongA
SetRect
CallNextHookEx
PostMessageA
gdi32
CreateFontIndirectA
CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
DeleteDC
CreatePatternBrush
GetObjectA
DeleteObject
ExtCreateRegion
BitBlt
CreateDIBSection
CreateRectRgn
CreateFontA
CombineRgn
SelectObject
GetStockObject
CreateRectRgnIndirect
advapi32
RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
shell32
ShellExecuteA
ole32
CreateStreamOnHGlobal
olepro32
ord251
oleaut32
VariantClear
msvcp60
??8std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_istream@DU?$char_traits@D@std@@@1@@
??_8?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@7B?$basic_ostream@DU?$char_traits@D@std@@@1@@
??0ios_base@std@@IAE@XZ
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??0?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@H@Z
??_7?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@6B@
?getline@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@1@AAV21@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@1@D@Z
??1?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?capacity@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?copy@?$char_traits@D@std@@SAPADPADPBDI@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
?rfind@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??_7out_of_range@std@@6B@
??1out_of_range@std@@UAE@XZ
??0out_of_range@std@@QAE@ABV01@@Z
??0logic_error@std@@QAE@ABV01@@Z
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??_F?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Xlen@std@@YAXXZ
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
winmm
timeGetTime
Sections
.text Size: 3.3MB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 308KB - Virtual size: 306KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 224KB - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ