Static task
static1
Behavioral task
behavioral1
Sample
dceffe1fe1a5a70b7f58f6f571b29e4a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dceffe1fe1a5a70b7f58f6f571b29e4a_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dceffe1fe1a5a70b7f58f6f571b29e4a_JaffaCakes118
-
Size
127KB
-
MD5
dceffe1fe1a5a70b7f58f6f571b29e4a
-
SHA1
7e0d7629bb9ea19b2eb01d356325ad427b4e18d9
-
SHA256
ae90ca6bc4260f96730cb319d4d4f4ed81a60be33471661cd6d48bb38995d975
-
SHA512
f6e7b1a99a5b35f6a1afd6140027316cfc22c10ba93de08482e20c648d992f6d740c970e8ff1fe863e2f641723c83b7745697884601268787236d20916efafa8
-
SSDEEP
3072:1FsYMHdcc3xedNntTBfpyc3Z/+o/GdwwyZm992TC:1033MdNntTBhZZedwL0MC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dceffe1fe1a5a70b7f58f6f571b29e4a_JaffaCakes118
Files
-
dceffe1fe1a5a70b7f58f6f571b29e4a_JaffaCakes118.exe windows:4 windows x86 arch:x86
16f27e1aa39af3671b41292a759b02c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
PostMessageA
EndPaint
PostQuitMessage
RegisterClassA
BeginPaint
DefWindowProcA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
msvcrt
free
_onexit
_exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
__dllonexit
time
srand
memset
__CxxFrameHandler
islower
rand
strlen
strcat
_snprintf
strncpy
??2@YAPAXI@Z
_ftol
memchr
malloc
_XcptFilter
shell32
ShellExecuteA
msvcp60
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?_Xlen@std@@YAXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
kernel32
SizeofResource
FreeResource
GetStartupInfoA
GlobalLock
LoadResource
FindResourceA
GetCurrentDirectoryA
SetCurrentDirectoryA
DeleteFileA
GetFileSize
GetModuleHandleA
GetModuleFileNameA
CloseHandle
CreateFileA
SetFilePointer
WriteFile
GetWindowsDirectoryA
GetLocalTime
GetLastError
CreateThread
SetEndOfFile
ReadFile
imagehlp
MakeSureDirectoryPathExists
shlwapi
PathFileExistsA
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE