Static task
static1
Behavioral task
behavioral1
Sample
f4fe2f41c1f4fea2b67d3511947768d9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
f4fe2f41c1f4fea2b67d3511947768d9_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f4fe2f41c1f4fea2b67d3511947768d9_JaffaCakes118
-
Size
43KB
-
MD5
f4fe2f41c1f4fea2b67d3511947768d9
-
SHA1
5bfd8f6191deda07b1be8b63b96b7340ba600947
-
SHA256
e34de346627335f1d85796273083713b354cd98c358681190a55e1b54bc83b5f
-
SHA512
7a836a35f11e0e3db9344b1735c09893d5cd4cb1a8dd9b712b49847bc3381bd01ef8b16a46699582e536debf7a1e9a9636140fafc1c003a483364bc06e1faa9e
-
SSDEEP
768:x+9bUa+gP+IzR8c3q4IjroJW1RwkIkF2OEtIll:x+9bUa+gP+IptIfoJ+RkYEtIll
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f4fe2f41c1f4fea2b67d3511947768d9_JaffaCakes118
Files
-
f4fe2f41c1f4fea2b67d3511947768d9_JaffaCakes118.exe windows:5 windows x86 arch:x86
b587ef7c2ae9e41148a41c736874e5cf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
sxs
SxsQueryManifestInformation
SxsRunDllInstallAssemblyW
SxsOleAut32MapReferenceClsidToConfiguredClsid
SxsGenerateActivationContext
SxsOleAut32RedirectTypeLibrary
SxsRunDllInstallAssembly
SxsBeginAssemblyInstall
SxsProbeAssemblyInstallation
CreateAssemblyNameObject
SxsEndAssemblyInstall
CreateAssemblyCache
SxspGenerateManifestPathOnAssemblyIdentity
SxsUninstallW
SxsInstallW
msvcp60
??_7?$basic_ios@GU?$char_traits@G@std@@@std@@6B@
_Poly
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAJ@Z
?peek@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEHXZ
?find_last_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIABV12@I@Z
?_Nanv@?$_Ctr@N@std@@SANN@Z
?atan2@?$_Ctr@N@std@@SANNN@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
??Gstd@@YA?AV?$complex@M@0@ABV10@@Z
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHIIABV12@II@Z
?polar@std@@YA?AV?$complex@O@1@ABO0@Z
??4_Num_int_base@std@@QAEAAU01@ABU01@@Z
??_F?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAEXXZ
?_Getcat@?$numpunct@D@std@@SAIXZ
??_7bad_exception@std@@6B@
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIDI@Z
??_8?$basic_ofstream@GU?$char_traits@G@std@@@std@@7B@
?_Getcat@?$time_get@GV?$istreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@SAIXZ
_Dtest
?open@?$basic_ifstream@GU?$char_traits@G@std@@@std@@QAEXPBDF@Z
?_Infv@?$_Ctr@O@std@@SAOO@Z
??0?$basic_streambuf@GU?$char_traits@G@std@@@std@@QAE@ABV01@@Z
?_Gndec@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?find_last_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IABV12@II@Z
?truename@?$numpunct@G@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
??0?$basic_fstream@DU?$char_traits@D@std@@@std@@QAE@PBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??_F?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
msoert2
HrBSTRToLPSZ
PszScanToCharA
HrLPSZCPToBSTR
HrIndexOfMonth
CreateStreamOnHFile
DeleteTempFileOnShutdownEx
strtrimW
HrGetStreamSize
GetDllMajorVersion
HrGetCertKeyUsage
HrGetStyleSheet
HrIndexOfWeek
MessageBoxInstW
PVDecodeObject
CleanupFileNameInPlaceW
CreateLogFile
FIsEmptyW
HrFindInetTimeZone
OpenFileStreamW
StrToUintW
IsUpper
HrCopyStreamToByte
strtrim
PszDayFromIndex
GetExePath
FBuildTempPath
WriteStreamToFileHandle
CryptFreeFunc
kernel32
LZOpenFileA
VirtualAlloc
CancelTimerQueueTimer
SetCalendarInfoA
GetGeoInfoA
LoadLibraryA
SetConsoleNumberOfCommandsA
PrepareTape
GetModuleHandleA
_lclose
GetCommandLineW
lstrcpyA
FormatMessageW
DeleteTimerQueue
SetFileValidData
HeapCompact
PrivMoveFileIdentityW
SetProcessPriorityBoost
GetProcessPriorityBoost
LockResource
RegisterWowBaseHandlers
lstrcmpA
GetLastError
user32
GetAltTabInfoW
AppendMenuA
CsrBroadcastSystemMessageExW
SendIMEMessageExA
CopyAcceleratorTableW
MapVirtualKeyExA
CharLowerBuffW
CharLowerA
SetMessageQueue
DialogBoxParamA
TranslateMessageEx
DrawStateW
IsIconic
IMPQueryIMEW
GetLastInputInfo
FreeDDElParam
CloseWindowStation
GetMenuBarInfo
DdeDisconnect
SetScrollRange
UpdateLayeredWindow
User32InitializeImmEntryTable
SetWindowsHookA
GetSysColorBrush
GetScrollInfo
msvcirt
??0ostream_withassign@@QAE@XZ
??0stdiobuf@@QAE@ABV0@@Z
??0strstreambuf@@QAE@PAEH0@Z
??_7strstream@@6B@
??4istream@@IAEAAV0@ABV0@@Z
?tellp@ostream@@QAEJXZ
??0logic_error@@QAE@ABQBD@Z
??_Eios@@UAEPAXI@Z
??4istream@@IAEAAV0@PAVstreambuf@@@Z
??_Estrstream@@UAEPAXI@Z
?setb@streambuf@@IAEXPAD0H@Z
??_8stdiostream@@7Bistream@@@
?xsgetn@streambuf@@UAEHPADH@Z
??1stdiostream@@UAE@XZ
?pbump@streambuf@@IAEXH@Z
?put@ostream@@QAEAAV1@D@Z
??5istream@@QAEAAV0@AAC@Z
??_Difstream@@QAEXXZ
?attach@ofstream@@QAEXH@Z
??_Estreambuf@@UAEPAXI@Z
?sgetc@streambuf@@QAEHXZ
??4ostream_withassign@@QAEAAVostream@@PAVstreambuf@@@Z
??0ofstream@@QAE@ABV0@@Z
?get@istream@@QAEAAV1@AAD@Z
?sync_with_stdio@ios@@SAXXZ
?x_maxbit@ios@@0JA
?flags@ios@@QAEJJ@Z
??0strstreambuf@@QAE@P6APAXJ@ZP6AXPAX@Z@Z
?epptr@streambuf@@IBEPADXZ
oleaut32
VarUI4FromI2
VarBstrFromDate
VarR4FromDate
VarR4FromI1
VarI1FromStr
VarUI1FromCy
VarI8FromDisp
SafeArrayGetElemsize
VarI8FromCy
VarI2FromDate
VarPow
VarR4FromUI2
VarI2FromR4
VarUI1FromUI2
VarUI8FromI2
VarFix
VarCyAdd
VarDecSub
OleLoadPicture
LPSAFEARRAY_Unmarshal
VarUI8FromCy
VarI8FromUI1
Sections
.text Size: 1024B - Virtual size: 698B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ