Static task
static1
Behavioral task
behavioral1
Sample
ddd94b5089dd6f928630f0511400708f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ddd94b5089dd6f928630f0511400708f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ddd94b5089dd6f928630f0511400708f_JaffaCakes118
-
Size
84KB
-
MD5
ddd94b5089dd6f928630f0511400708f
-
SHA1
9f8fc09920f339eabf10e67a622ce9d722414cc7
-
SHA256
eccfb387c8d7ebfe9c0a9ca7a9f3087dd613d0df0d0371994e5ae68cad4d9973
-
SHA512
fe373b91e29189e5c58bef7fa0694ac067d13d0060ddcaf3cbd49e7b26f4f715996ec2c0c3aed88499c87d84724494cc9080b34cb61850454dba764e97166e2f
-
SSDEEP
1536:Zn8z1Fp0/jPChcbGYFVvKfPxbTO6QnqTHYM2oHNWXvs6qew89E2kJXY:ZnjrP4hqvKfPNTORKH2CMWeUhXY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddd94b5089dd6f928630f0511400708f_JaffaCakes118
Files
-
ddd94b5089dd6f928630f0511400708f_JaffaCakes118.exe windows:5 windows x86 arch:x86
e1e61abe5c055176bcd69af31cbce6b6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcp60
_Getcvt
??_F?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?real@?$_Complex_base@M@std@@QBEMXZ
??_7?$money_put@DV?$ostreambuf_iterator@DU?$char_traits@D@std@@@std@@@std@@6B@
?open@?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAEXPBDH@Z
?open@?$basic_fstream@GU?$char_traits@G@std@@@std@@QAEXPBDH@Z
?pow@std@@YA?AV?$complex@N@1@ABNABV21@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAD@Z
??1runtime_error@std@@UAE@XZ
??0?$money_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
?intl@?$moneypunct@G$0A@@std@@2_NB
?sqrt@?$_Ctr@N@std@@SANN@Z
??_F?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
??9std@@YA_NABV?$complex@M@0@ABM@Z
?_Init@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@IAEXABV_Locinfo@2@@Z
?thousands_sep@?$numpunct@D@std@@QBEDXZ
??0ctype_base@std@@QAE@I@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEDD@Z
?begin@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??_8?$basic_iostream@GU?$char_traits@G@std@@@std@@7B?$basic_istream@GU?$char_traits@G@std@@@1@@
?close@?$basic_fstream@GU?$char_traits@G@std@@@std@@QAEXXZ
_FNan
??5std@@YAAAV?$basic_istream@GU?$char_traits@G@std@@@0@AAV10@AAV?$complex@O@0@@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Getcat@?$_Mpunct@D@std@@SAIXZ
?copy@?$char_traits@D@std@@SAPADPADPBDI@Z
??A?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAGI@Z
??1ctype_base@std@@UAE@XZ
kernel32
DeleteVolumeMountPointW
FindNextVolumeA
ReadConsoleOutputW
GetCurrentThreadId
GetProfileIntW
QueryInformationJobObject
_lclose
GetTickCount
VirtualQuery
VirtualAlloc
ConsoleMenuControl
GetPrivateProfileIntA
MoveFileWithProgressA
SetConsoleCursorInfo
GetVDMCurrentDirectories
SetSystemTime
lstrcatA
CreateTimerQueue
UnregisterConsoleIME
LocalSize
GlobalReAlloc
QueryPerformanceCounter
_lcreat
GetConsoleAliasExesLengthW
LoadLibraryA
InterlockedIncrement
DefineDosDeviceA
IsBadReadPtr
GetCurrentProcessId
BackupRead
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetOEMCP
LocalFileTimeToFileTime
SetDefaultCommConfigA
LZOpenFileA
GetStartupInfoA
wiavideo
DllUnregisterServer
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 30KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 268B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ