Static task
static1
Behavioral task
behavioral1
Sample
f2c3ec62c36e55f6798278e3580e0ce6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f2c3ec62c36e55f6798278e3580e0ce6_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
f2c3ec62c36e55f6798278e3580e0ce6_JaffaCakes118
-
Size
548KB
-
MD5
f2c3ec62c36e55f6798278e3580e0ce6
-
SHA1
1102361ca07a262f6ce954689e1aa12d23d24b38
-
SHA256
d266e4cd0c9a692fb53dcdcfa27c645fe2d0dd5005b807ebfd906106238b6189
-
SHA512
28aeeb37c641b2645a6c6857c294447d44b96fac3f19d64f0f06d357bab7c5c8756c2d7e323a439dfe6fde7e89eabaa6a15e01139fc386a814595afa8c08a690
-
SSDEEP
6144:3ZkMIiKA/7pwL+/NeuoSjyS+x1XTCcc8flLTshcMcno+yV29AJS82myM:pkniyL+/Neu7uSG1XWccEdMcnka
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f2c3ec62c36e55f6798278e3580e0ce6_JaffaCakes118
Files
-
f2c3ec62c36e55f6798278e3580e0ce6_JaffaCakes118.exe windows:4 windows x86 arch:x86
ca5a1b60e2f4983f21e874cc12951021
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetStdHandle
CompareStringA
CompareStringW
GetProfileStringA
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetTimeZoneInformation
HeapSize
HeapReAlloc
GetACP
RaiseException
HeapAlloc
HeapFree
GetCommandLineA
GetStartupInfoA
RtlUnwind
TerminateProcess
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
CopyFileA
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetOEMCP
GetCPInfo
GetProcessVersion
GetCurrentDirectoryA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SizeofResource
GlobalFlags
GetProfileIntA
GetTickCount
FormatMessageA
LocalFree
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
SetLastError
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
lstrcpynA
GetFileAttributesA
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalFindAtomA
lstrcpyA
GetModuleHandleA
GetProcAddress
lstrlenA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GlobalAddAtomA
CloseHandle
GlobalDeleteAtom
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
lstrcmpA
LockResource
FindResourceA
LoadResource
GetVersionExA
GlobalLock
GlobalSize
GlobalUnlock
MulDiv
GlobalAlloc
VirtualAlloc
GlobalReAlloc
GlobalFree
GetModuleFileNameA
CreateFileA
SetEnvironmentVariableA
user32
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
DestroyCursor
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
LoadIconA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
WinHelpA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
GetMessageTime
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
IntersectRect
IsIconic
GetWindowPlacement
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
GetDesktopWindow
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
IsZoomed
CheckMenuItem
EnableMenuItem
GetFocus
GetMessageA
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetLastActivePopup
MessageBoxA
SetCursor
ShowOwnedPopups
PostQuitMessage
GetNextDlgTabItem
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetMessagePos
SetRect
CallWindowProcA
SetWindowLongA
ReleaseCapture
SetActiveWindow
SetCapture
GetCapture
ClientToScreen
GetWindowRect
DrawFrameControl
EnableWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
FindWindowW
SetParent
PostThreadMessageA
DrawEdge
PtInRect
RedrawWindow
GetParent
PostMessageA
IsWindow
GetSystemMetrics
TranslateMessage
DispatchMessageA
GetKeyState
SendMessageA
InflateRect
DrawFocusRect
OffsetRect
UnionRect
DestroyMenu
LoadMenuA
ReuseDDElParam
UnpackDDElParam
wsprintfA
BringWindowToTop
CopyRect
GetClassInfoA
DefWindowProcA
LoadCursorA
RegisterClipboardFormatA
SystemParametersInfoA
GetSysColor
GetSysColorBrush
FillRect
GetDC
ReleaseDC
InvalidateRect
GetClientRect
LockWindowUpdate
GetDCEx
InvertRect
KillTimer
SetTimer
FindWindowA
MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
DestroyIcon
LoadStringA
GetMenuStringA
InsertMenuA
GetClassNameA
wvsprintfA
WindowFromPoint
IsClipboardFormatAvailable
CharUpperA
GetTabbedTextExtentA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
GetSystemMenu
DeleteMenu
AppendMenuA
SetMenuItemBitmaps
IsRectEmpty
SetMenu
gdi32
DPtoLP
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
StartDocA
SetAbortProc
CreateDCA
DeleteDC
SelectObject
GetTextMetricsA
StretchDIBits
DeleteObject
GetCharWidthA
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
PatBlt
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
CreatePatternBrush
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
DeleteMetaFile
CloseMetaFile
GetTextAlign
GetMapMode
SetRectRgn
CombineRgn
CreateRectRgnIndirect
GetTextColor
GetBkColor
LPtoDP
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
CopyMetaFileA
SetBkColor
SetTextColor
GetClipBox
EnumFontFamiliesA
CreateFontIndirectA
CreatePalette
CreateHatchBrush
Rectangle
GetTextExtentPoint32A
CreatePen
CreateFontA
CreateCompatibleBitmap
BitBlt
StretchBlt
CreateBitmap
CreateCompatibleDC
GetDeviceCaps
CreateEnhMetaFileA
CloseEnhMetaFile
CopyEnhMetaFileA
DeleteEnhMetaFile
GetStockObject
GetObjectA
SelectPalette
RealizePalette
CreateDIBitmap
GetTextExtentPointA
GetDIBits
comdlg32
ChooseColorA
GetOpenFileNameA
PrintDlgA
GetFileTitleA
CommDlgExtendedError
GetSaveFileNameA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegSetValueA
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
SetFileSecurityA
GetFileSecurityA
RegCloseKey
RegCreateKeyA
shell32
SHGetFileInfoA
DragQueryFileA
DragFinish
ExtractIconA
comctl32
ImageList_Draw
ImageList_GetImageInfo
ImageList_GetImageCount
ord17
ImageList_Destroy
ImageList_LoadImageA
oledlg
ord8
ole32
OleDuplicateData
CoRevokeClassObject
CoRegisterMessageFilter
CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
RevokeDragDrop
CoLockObjectExternal
DoDragDrop
OleGetClipboard
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoTaskMemFree
ReleaseStgMedium
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CLSIDFromString
CLSIDFromProgID
CreateStreamOnHGlobal
RegisterDragDrop
olepro32
ord253
oleaut32
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysStringLen
Sections
.text Size: 308KB - Virtual size: 306KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ