Static task
static1
Behavioral task
behavioral1
Sample
0f8631fdadb035d6d8a738a0483952e1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0f8631fdadb035d6d8a738a0483952e1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0f8631fdadb035d6d8a738a0483952e1_JaffaCakes118
-
Size
100KB
-
MD5
0f8631fdadb035d6d8a738a0483952e1
-
SHA1
a0ba98c2648acbfcbc4b7191404078e0d92f98a8
-
SHA256
6b500348ccd6a5447eb63ea2f313125d97c149a50bc6474430e8a81424e3a652
-
SHA512
b1b256a49599618979a6ab8a2ffad5fad99e71b4ef7008b3f3d5977f452d5b2239f5ef631d4a117396be4847a60e5c5a59e07e333f81ee1cc4ad77a5c9a610a6
-
SSDEEP
1536:K+taGMr7Q1HbEdThKSJeuli9E3e57/d/FXXEL7u:K+taGMrnUuSE3e57/jOK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0f8631fdadb035d6d8a738a0483952e1_JaffaCakes118
Files
-
0f8631fdadb035d6d8a738a0483952e1_JaffaCakes118.exe windows:4 windows x86 arch:x86
61c70dca36f94362d5e860c9668b6b81
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcp60
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?find_first_not_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHABV12@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEPADPADD@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?_Freeze@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?find_first_of@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
?_Xran@std@@YAXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
?insert@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@IPBDI@Z
msvcrt
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
free
atoi
_CxxThrowException
srand
rand
sprintf
??2@YAPAXI@Z
__CxxFrameHandler
strcpy
strcat
memset
strlen
memcpy
_itoa
wcslen
_except_handler3
__dllonexit
_onexit
kernel32
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
GetStartupInfoA
GetModuleHandleA
InterlockedDecrement
IsValidCodePage
FreeLibrary
GetCurrentThreadId
LoadLibraryA
GetProcAddress
GetUserDefaultLangID
GetTickCount
GetLastError
MulDiv
GetCommandLineA
GetCurrentProcessId
GetUserDefaultUILanguage
GetUserDefaultLCID
GetVersion
LocalFree
user32
GetForegroundWindow
IsMenu
GetCapture
GetActiveWindow
GetInputState
IsWindow
IsCharUpperA
GetCursor
IsCharAlphaA
GetFocus
GetDesktopWindow
IsCharAlphaNumericA
oleaut32
VariantClear
SysAllocString
GetErrorInfo
SysAllocStringByteLen
SysStringByteLen
SysFreeString
Sections
.text Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 102KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 454B - Virtual size: 454B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 640B - Virtual size: 640B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ