Static task
static1
Behavioral task
behavioral1
Sample
146492d988239db138dc2204a3204a2d_JaffaCakes118.exe
Resource
win7-20240903-en
General
-
Target
146492d988239db138dc2204a3204a2d_JaffaCakes118
-
Size
269KB
-
MD5
146492d988239db138dc2204a3204a2d
-
SHA1
4ea649d4c534258eee185a30d399f8dc0397fd45
-
SHA256
5620e17793534f1589344564d77d3740ddeb7eb1487aa54c9a92c82770f62cae
-
SHA512
673f4b46e7d33e615cae5155e4f846aa6b2fc60596dabf33b0123a84b9f5e5ecf31e58578c1633f7016ef46bc937354a8daadd7d79601186ee0df6ef2f848b11
-
SSDEEP
6144:z6ABWw6K4bAqR9qun8w/LJTq32o/4GgLFj:z6eJ4bAqrvnxdO32s1qj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 146492d988239db138dc2204a3204a2d_JaffaCakes118
Files
-
146492d988239db138dc2204a3204a2d_JaffaCakes118.exe windows:4 windows x86 arch:x86
8cf9ded589fa88e27d598a89ef2ae7d0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
CloseHandle
CreateFileW
LoadLibraryW
GetProcAddress
RaiseException
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
lstrlenW
InitializeCriticalSection
GetVersion
ReadFile
ExitProcess
TerminateProcess
GetCurrentProcess
TlsSetValue
TlsFree
GlobalFree
GlobalLock
GlobalAlloc
GlobalReAlloc
GetModuleHandleA
IsBadWritePtr
GetModuleHandleW
GetLocaleInfoA
WideCharToMultiByte
HeapFree
HeapCreate
HeapAlloc
GetLastError
LocalAlloc
LockResource
InterlockedExchange
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
VirtualProtect
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LocalFree
LoadResource
FindResourceW
TlsAlloc
GetStartupInfoA
user32
KillTimer
SetWindowPos
RegisterClassW
IsWindow
DestroyWindow
CreateWindowExW
LoadCursorW
SetWindowLongW
InvalidateRect
DefWindowProcW
GetDC
ReleaseDC
SetTimer
GetWindowLongW
BeginPaint
GetSysColor
EndPaint
UpdateWindow
advapi32
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegCloseKey
gdi32
BitBlt
StretchDIBits
SetStretchBltMode
CreateDIBSection
SelectPalette
GetPaletteEntries
DeleteObject
CreateCompatibleDC
RealizePalette
DeleteDC
GetObjectW
CreatePalette
GetSystemPaletteEntries
GetDeviceCaps
CreateHalftonePalette
GetNearestPaletteIndex
SelectObject
ole32
GetClassFile
CoCreateInstance
CoTaskMemFree
StringFromCLSID
CoFreeUnusedLibraries
msvcrt
??3@YAXPAX@Z
__CxxFrameHandler
time
_except_handler3
_adjust_fdiv
_initterm
free
_XcptFilter
memset
_wcsicmp
wcsrchr
wcslen
_itow
wcscpy
wcscat
swprintf
__dllonexit
_onexit
_exit
exit
_acmdln
__getmainargs
__setusermatherr
__p__commode
__p__fmode
__set_app_type
_controlfp
msvcp60
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@D@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??5std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??Ostd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 223KB - Virtual size: 445KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ