Static task
static1
Behavioral task
behavioral1
Sample
fb461f9fe605a58c6c40d1f152febcac_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
fb461f9fe605a58c6c40d1f152febcac_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
fb461f9fe605a58c6c40d1f152febcac_JaffaCakes118
-
Size
866KB
-
MD5
fb461f9fe605a58c6c40d1f152febcac
-
SHA1
2c4d71bcd3c5f2a7dc4d713cd5013807cbe4af26
-
SHA256
9fe48bcf6945730c319709eb338c28dfa5896a2a8e5d411d61733cbd5a9e1221
-
SHA512
eefa5a87ada79faaba8c6af7d45b6d43e56ef1860fde2963e75642bf4c9659171561f01eea171b8aa6ee089571ca7e0914d6ee80d89865a5c816b26b7c286909
-
SSDEEP
12288:DmniVP0ckq7VMyuP7Y9htUo66DtAyxRCHkBBiaLXD++J6dLC30v3E1DA5Ziwf2ql:DmQIq7VTtUx6DmsRCHr2tICk/VBI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb461f9fe605a58c6c40d1f152febcac_JaffaCakes118
Files
-
fb461f9fe605a58c6c40d1f152febcac_JaffaCakes118.exe windows:5 windows x86 arch:x86
49f164e732f29b6a4607fb5b45480fec
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEndOfFile
DefineDosDeviceA
ReadConsoleOutputW
GetConsoleCharType
WaitNamedPipeA
GetSystemDefaultLCID
GetSystemDefaultLangID
HeapCreate
EnterCriticalSection
RaiseException
_llseek
LoadLibraryA
CreateJobObjectA
EnumDateFormatsA
GetUserDefaultLCID
IsValidCodePage
IsValidLocale
SetEvent
GetNamedPipeHandleStateA
lstrcpyW
GetNamedPipeHandleStateW
SetLocaleInfoA
VirtualAlloc
UnmapViewOfFile
FatalExit
GetNextVDMCommand
LeaveCriticalSection
lstrlenW
IsDebuggerPresent
ReadDirectoryChangesW
ReplaceFile
SetThreadLocale
WriteConsoleOutputW
_lcreat
setupapi
SetupGetLineCountW
SetupInstallServicesFromInfSectionW
SetupDiClassNameFromGuidExA
SetupLogFileW
CM_Disable_DevNode
SetupDiGetHwProfileListExA
SetupGetStringFieldW
CM_Get_Hardware_Profile_Info_ExW
SetupQueueDefaultCopyA
SetupDiClassGuidsFromNameW
SetupCopyErrorA
SetupSetFileQueueFlags
SetupGetInfInformationA
CM_Get_Class_NameA
SetupGetNonInteractiveMode
pSetupWriteLogError
pSetupRealloc
SetupDiBuildDriverInfoList
SetupDiGetClassImageListExW
SetupDiGetDriverInfoDetailA
SetupOpenInfFileA
SetupDiOpenDevRegKey
CM_Set_HW_Prof_FlagsW
SetupDiCreateDeviceInterfaceRegKeyA
CM_Get_HW_Prof_FlagsA
mfcsubs
?ConcatCopy@CString@@IAEXHPBGH0@Z
??4CPlex@@QAEAAU0@ABU0@@Z
??4CString@@QAEABV0@PBD@Z
?InsertAt@CStringArray@@QAEXHPAV1@@Z
??8@YG_NABVCString@@PBG@Z
?Init@CString@@IAEXXZ
?RemoveAll@CStringArray@@QAEXXZ
??BCString@@QBEPBGXZ
?LookupKey@CMapStringToPtr@@QBEHPBGAAPBG@Z
??0CString@@QAE@PBGH@Z
?NewAssoc@CMapStringToPtr@@IAEPAUCAssoc@1@XZ
?AfxLoadString@@YGHIPAGI@Z
?TrimRight@CString@@QAEXXZ
??ACStringArray@@QAEAAVCString@@H@Z
??0CStringArray@@QAE@XZ
??P@YG_NPBGABVCString@@@Z
?IsEmpty@CMapStringToPtr@@QBEHXZ
?Lock@CCriticalSection@@UAEHK@Z
?Collate@CString@@QBEHPBG@Z
?Release@CString@@KGXPAUCStringData@@@Z
?RemoveAt@CStringArray@@QAEXHH@Z
?ElementAt@CStringArray@@QAEAAVCString@@H@Z
??O@YG_NPBGABVCString@@@Z
??0CString@@QAE@ABV0@@Z
??ACStringArray@@QBE?AVCString@@H@Z
?Add@CStringArray@@QAEHPBG@Z
?GetAssocAt@CMapStringToPtr@@IBEPAUCAssoc@1@PBGAAI@Z
??M@YG_NABVCString@@0@Z
?SetAt@CStringArray@@QAEXHPBG@Z
??9@YG_NPBGABVCString@@@Z
?FreeAssoc@CMapStringToPtr@@IAEXPAUCAssoc@1@@Z
??1CMapStringToPtr@@UAE@XZ
?AllocBuffer@CString@@IAEXH@Z
??H@YG?AVCString@@ABV0@PBG@Z
??0CString@@QAE@PBG@Z
??0CCriticalSection@@QAE@XZ
??O@YG_NABVCString@@PBG@Z
??H@YG?AVCString@@GABV0@@Z
??ACString@@QBEGH@Z
?Format@CString@@QAAXIZZ
?InitHashTable@CMapStringToPtr@@QAEXIH@Z
??N@YG_NPBGABVCString@@@Z
comctl32
CreateStatusWindow
DrawStatusTextW
ImageList_SetFlags
ImageList_DragShowNolock
ImageList_Write
FlatSB_GetScrollPos
ImageList_GetImageRect
CreatePropertySheetPageW
DllGetVersion
ImageList_EndDrag
ImageList_GetImageCount
ImageList_LoadImageA
ImageList_Duplicate
ImageList_Replace
CreateToolbarEx
PropertySheetA
DrawStatusText
ImageList_GetImageInfo
InitCommonControls
InitCommonControlsEx
ImageList_SetDragCursorImage
ShowHideMenuCtl
PropertySheet
ImageList_LoadImage
ImageList_DragEnter
ImageList_Destroy
GetEffectiveClientRect
FlatSB_ShowScrollBar
ImageList_GetFlags
FlatSB_GetScrollProp
InitMUILanguage
LBItemFromPt
ImageList_GetDragImage
GetMUILanguage
_TrackMouseEvent
ImageList_Copy
FlatSB_GetScrollInfo
CreatePropertySheetPage
ImageList_SetIconSize
msvcp60
??0?$time_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@I@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@N@Z
?pubsetbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PADH@Z
??0?$money_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@QAE@ABV_Locinfo@1@I@Z
?gptr@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?empty@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE_NXZ
??_8?$basic_istream@DU?$char_traits@D@std@@@std@@7B@
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@W4_Uninitialized@1@@Z
?is_open@?$basic_filebuf@GU?$char_traits@G@std@@@std@@QBE_NXZ
?eback@?$basic_streambuf@GU?$char_traits@G@std@@@std@@IBEPAGXZ
?open@?$basic_filebuf@GU?$char_traits@G@std@@@std@@QAEPAV12@PBDH@Z
?_Getcat@?$numpunct@D@std@@SAIXZ
??4?$char_traits@G@std@@QAEAAU01@ABU01@@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?seekpos@?$basic_stringbuf@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@MAE?AV?$fpos@H@2@V32@H@Z
??8std@@YA_NPBDABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHIIPBGI@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@H@2@XZ
??X?$_Complex_base@N@std@@QAEAAV01@ABN@Z
??4id@locale@std@@QAEAAV012@ABV012@@Z
??0__non_rtti_object@std@@QAE@PBD@Z
??0?$messages@D@std@@QAE@ABV_Locinfo@1@I@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z
??Nstd@@YA_NABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@PBG@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?_Term@?$ctype@D@std@@KAXXZ
?out@?$codecvt@GDH@std@@QBEHAAHPBG1AAPBGPAD3AAPAD@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$complex@O@0@@Z
?_Getcat@?$collate@D@std@@SAIXZ
?close@?$basic_ofstream@GU?$char_traits@G@std@@@std@@QAEXXZ
??4?$complex@N@std@@QAEAAV01@ABV01@@Z
?max_size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@ABV01@@Z
??4?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEAAV01@ABV01@@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
_LRteps
msasn1
ASN1DecAlloc
ASN1intx_sub
ASN1DecSetError
ASN1BEREncSX
ASN1CEREncUTCTime
ASN1BEREncU32
ASN1_CreateDecoder
ASN1Free
ASN1_CloseEncoder
ASN1BERDecNull
ASN1BERDecOpenType
ASN1generalizedtime_cmp
ASN1CEREncChar16String
ASN1octetstring_free
ASN1CEREncChar32String
ASN1CEREncOctetString
ASN1BERDecBitString2
ASN1_SetDecoderOption
ASN1EncSetError
ASN1char32string_free
ASN1BERDotVal2Eoid
ASN1intx_uoctets
ASN1BEREncUTF8String
ASN1BEREncEndOfContents
ASN1BERDecNotEndOfContents
ASN1intx_setuint32
lz32
GetExpandedNameW
LZCloseFile
LZRead
LZClose
GetExpandedNameA
CopyLZFile
LZSeek
LZDone
LZOpenFileW
LZCreateFileW
LZOpenFileA
LZInit
LZStart
LZCopy
msvcrt
__getmainargs
exit
__set_app_type
__p__commode
Sections
.text Size: 162KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 502KB - Virtual size: 502KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 198KB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ