?interfaceMap@CDocHostSite@@1UAFX_INTERFACEMAP@@B
Static task
static1
Behavioral task
behavioral1
Sample
28a7d7bd624602d48a35db336ccdf295_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
28a7d7bd624602d48a35db336ccdf295_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
28a7d7bd624602d48a35db336ccdf295_JaffaCakes118
-
Size
136KB
-
MD5
28a7d7bd624602d48a35db336ccdf295
-
SHA1
2d0e7fca67f993db2c997bcd06f9f4952170d57f
-
SHA256
ba864531b972876246ce248c132ede1c287878530958e64ad11c50db59d835d5
-
SHA512
6876312760d97b3a6623512dd48d17582a7f6254af5599154facb4a6b810b483d44c61c6e2f9f612714a64b30b0e4f0d63eb2274fc72e9e252bf235228a75561
-
SSDEEP
1536:9rPiQLb1A64gRNlo/ZKRJiIb9OgBWKjHTW+zQO7OuQ5hWhWGd7A79xX0EQr7MR/F:3b1XRLo/5IBOGrsCtQ5MhWGd4X0EQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 28a7d7bd624602d48a35db336ccdf295_JaffaCakes118
Files
-
28a7d7bd624602d48a35db336ccdf295_JaffaCakes118.exe windows:4 windows x86 arch:x86
51cf05e8050a3dfc1499946c7a797b30
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord6846
ord6858
ord6816
ord6815
ord6812
ord6845
ord6856
ord6835
ord4589
ord4588
ord4899
ord4370
ord4892
ord6817
ord5076
ord4340
ord4347
ord4720
ord4889
ord4531
ord4545
ord4543
ord4526
ord4529
ord4524
ord4963
ord4960
ord4108
ord6054
ord1776
ord5281
ord3748
ord1725
ord5260
ord6691
ord4432
ord6514
ord1200
ord2818
ord6199
ord6197
ord6699
ord6215
ord6803
ord939
ord6283
ord6282
ord5240
ord3353
ord4622
ord4424
ord614
ord2623
ord290
ord4003
ord1574
ord4226
ord2486
ord539
ord1114
ord3237
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord4079
ord4698
ord5307
ord5289
ord5714
ord3738
ord815
ord561
ord1768
ord2086
ord4277
ord5683
ord1205
ord2621
ord1134
ord2725
ord2625
ord1168
ord2841
ord4220
ord2584
ord3654
ord2438
ord6270
ord2863
ord1644
ord3258
ord6883
ord1113
ord2107
ord5450
ord5440
ord6383
ord6394
ord2764
ord5572
ord2915
ord941
ord541
ord801
ord6839
ord1949
ord6055
ord5290
ord818
ord567
ord2152
ord1233
ord4299
ord4275
ord2380
ord5875
ord5789
ord6172
ord6379
ord2393
ord690
ord1988
ord5207
ord389
ord1099
ord2919
ord6449
ord5435
ord1683
ord1673
ord2628
ord5980
ord2641
ord4122
ord6214
ord6196
ord4298
ord5948
ord3088
ord3875
ord3872
ord3871
ord6198
ord4286
ord4283
ord3137
ord3796
ord5719
ord6092
ord3524
ord4032
ord6095
ord4035
ord2549
ord2433
ord3579
ord426
ord726
ord2727
ord6467
ord2730
ord2729
ord4046
ord2145
ord2144
ord6225
ord5231
ord5247
ord2132
ord4601
ord826
ord6597
ord6800
ord3402
ord3721
ord6880
ord795
ord6241
ord3005
ord2135
ord824
ord6813
ord4786
ord6808
ord6814
ord6478
ord6796
ord2645
ord3810
ord2864
ord1175
ord920
ord6458
ord2405
ord5053
ord5981
ord6847
ord6867
ord6859
ord6832
ord6855
ord6823
ord6857
ord6807
ord6591
ord6650
ord470
ord755
ord323
ord1576
ord1640
ord5785
ord640
ord2379
ord1146
ord6453
ord4234
ord2414
ord641
ord3663
ord324
ord3597
ord4425
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5280
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1775
ord4078
ord6052
ord2514
ord4710
ord4998
ord4853
ord4376
ord5265
ord538
ord4202
ord6663
ord4129
ord858
ord823
ord861
ord6877
ord535
ord537
ord2614
ord6779
ord540
ord860
ord800
ord4278
ord825
msvcrt
isalnum
sprintf
_purecall
_CxxThrowException
??0exception@@QAE@ABQBD@Z
??0exception@@QAE@ABV0@@Z
rand
time
srand
_mbscmp
_mbsinc
_mbspbrk
_mbschr
_splitpath
_strcmpi
_setmbcp
_mbsicmp
__CxxFrameHandler
wcslen
atoi
isspace
??1exception@@UAE@XZ
tolower
_ismbcspace
_mbsnbicmp
_mbsicoll
wcscpy
_wtoi
_mbsnbcpy
_ftol
__dllonexit
_onexit
_except_handler3
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
kernel32
CloseHandle
CreateThread
LocalFree
GetWindowsDirectoryA
GetSystemDirectoryA
GetVersionExA
GetVersion
GetStartupInfoA
MultiByteToWideChar
GetTickCount
lstrlenW
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetLastError
CreateMutexA
WaitForSingleObject
CreateEventA
GetLocalTime
lstrlenA
Sleep
lstrcmpA
FindClose
FindFirstFileA
GetComputerNameA
WideCharToMultiByte
user32
PostMessageA
EnableWindow
SetTimer
KillTimer
GetClientRect
GetSysColor
TrackPopupMenuEx
ClientToScreen
WindowFromPoint
GetActiveWindow
InvalidateRect
GetParent
GetNextDlgTabItem
SendMessageA
TrackPopupMenu
GetMenuItemID
SetMenuDefaultItem
RegisterWindowMessageA
GetWindowRect
MessageBoxW
SetCursor
DrawTextA
SystemParametersInfoA
RedrawWindow
LoadCursorA
GetCursorPos
LoadMenuA
GetSubMenu
SetForegroundWindow
IsIconic
GetSystemMetrics
DrawIcon
PostThreadMessageA
LoadIconA
gdi32
GetStockObject
CreateCompatibleDC
BitBlt
GetObjectA
advapi32
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
shell32
Shell_NotifyIconA
ShellExecuteExA
ShellExecuteA
comctl32
_TrackMouseEvent
ole32
CoUninitialize
CoCreateInstance
CoInitialize
OleRun
CoTaskMemAlloc
oleaut32
VariantClear
VariantInit
SysAllocString
SysFreeString
wininet
InternetOpenUrlA
InternetOpenA
InternetGetConnectedState
InternetReadFile
InternetCloseHandle
msvcp60
??0?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAE@PAU_iobuf@@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??1runtime_error@std@@UAE@XZ
??0runtime_error@std@@QAE@ABV01@@Z
??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
??_7runtime_error@std@@6B@
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?freeze@strstreambuf@std@@QAEX_N@Z
?ends@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N1@Z
??0ios_base@std@@IAE@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PADH@Z
?seekpos@strstreambuf@std@@MAE?AV?$fpos@H@2@V32@H@Z
?seekoff@strstreambuf@std@@MAE?AV?$fpos@H@2@JW4seekdir@ios_base@2@H@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPBDH@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHPADH@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?underflow@strstreambuf@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?pbackfail@strstreambuf@std@@MAEHH@Z
??_7out_of_range@std@@6B@
??1out_of_range@std@@UAE@XZ
??0out_of_range@std@@QAE@ABV01@@Z
??0logic_error@std@@QAE@ABV01@@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
??_8?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@7B?$basic_ostream@GU?$char_traits@G@std@@@1@@
??_8?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@7B?$basic_istream@GU?$char_traits@G@std@@@1@@
??_7?$basic_ios@GU?$char_traits@G@std@@@std@@6B@
??0?$basic_iostream@GU?$char_traits@G@std@@@std@@QAE@PAV?$basic_streambuf@GU?$char_traits@G@std@@@1@@Z
??0?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??_7?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@6B@
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?npos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@2IB
?assign@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@ABV12@II@Z
?_Freeze@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXXZ
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBG@Z
?clear@ios_base@std@@QAEXH_N@Z
??5?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV01@AAH@Z
?append@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV12@IG@Z
??1?$basic_stringbuf@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@UAE@XZ
??1?$basic_iostream@GU?$char_traits@G@std@@@std@@UAE@XZ
??1ios_base@std@@UAE@XZ
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??1?$basic_ios@GU?$char_traits@G@std@@@std@@UAE@XZ
??_D?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??_8?$basic_ifstream@DU?$char_traits@D@std@@@std@@7B@
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??_7?$basic_ifstream@DU?$char_traits@D@std@@@std@@6B@
?open@?$basic_filebuf@DU?$char_traits@D@std@@@std@@QAEPAV12@PBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??_8?$basic_ofstream@DU?$char_traits@D@std@@@std@@7B@
??_7?$basic_ofstream@DU?$char_traits@D@std@@@std@@6B@
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_filebuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??1ostrstream@std@@UAE@XZ
?overflow@strstreambuf@std@@MAEHH@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Init@strstreambuf@std@@IAEXHPAD0H@Z
?_Global@_Locimp@locale@std@@0PAV123@A
?_Init@locale@std@@CAPAV_Locimp@12@XZ
??1strstreambuf@std@@UAE@XZ
Exports
Exports
Sections
.text Size: 84KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ