Static task
static1
Behavioral task
behavioral1
Sample
dd91ba3d55dad060c9ebc071b916b4ec_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
dd91ba3d55dad060c9ebc071b916b4ec_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
dd91ba3d55dad060c9ebc071b916b4ec_JaffaCakes118
-
Size
14KB
-
MD5
dd91ba3d55dad060c9ebc071b916b4ec
-
SHA1
19c20758af56356ce690aea1b3fef6f8f6000efc
-
SHA256
a82c1959ef187f1a5846719981324f22cce16d5f6c247a74d18b733b85caccc6
-
SHA512
33460748670bf10365e9696fdde5f366d16dac73912963d07e506c2024ff591bd4c66abb10d78aaf5840f6f5363486b54cd5a720613ab3f1bfab5ac923fb92a4
-
SSDEEP
384:smRXIGT1G7n6wxvInBT2XlygVTdv42x1HisF:sm91Guwx02ggVTdv42PHis
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd91ba3d55dad060c9ebc071b916b4ec_JaffaCakes118
Files
-
dd91ba3d55dad060c9ebc071b916b4ec_JaffaCakes118.exe windows:4 windows x86 arch:x86
e8860337a93fe8a4a359d649a38a9134
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DefWindowProcA
BeginPaint
EndPaint
PostQuitMessage
RegisterClassA
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
PostMessageA
advapi32
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
exit
_XcptFilter
_exit
??2@YAPAXI@Z
_snprintf
strcmp
memset
__CxxFrameHandler
strlen
??3@YAXPAX@Z
_acmdln
shell32
ShellExecuteA
msvcp60
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBDABV10@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?replace@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IIPBDI@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
kernel32
SetCurrentDirectoryA
OutputDebugStringA
GetModuleFileNameA
WriteFile
CreateThread
GetLastError
SetEndOfFile
SetFilePointer
GetWindowsDirectoryA
GetModuleHandleA
GetStartupInfoA
CreateFileA
CreateProcessA
CloseHandle
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: 1024B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE