Static task
static1
Behavioral task
behavioral1
Sample
fb17791c5b7b8fffa2e19f0d066c78b7_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fb17791c5b7b8fffa2e19f0d066c78b7_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
fb17791c5b7b8fffa2e19f0d066c78b7_JaffaCakes118
-
Size
1.4MB
-
MD5
fb17791c5b7b8fffa2e19f0d066c78b7
-
SHA1
e2264b126079620f9ea138e7c5042672bd04e2c1
-
SHA256
5a07f005dfe4c7574338da99e68beeb91a6404f7791e37fa86ec021869853cfb
-
SHA512
e903b8f0492514cabef471842b747c9b891a463875eb50c306f8a6826e547bc49f08df92d2b8f5d5f08818727872c741605d117b4dedc532d584baf2d51dc242
-
SSDEEP
24576:EzhhNa7Rg0sOJMus0Lp2xL94n103xUdcA8U7lnFfga2RD/6y8K+rLAJpWhpUrDVa:EzReZp2xL94n10Vgp2DVwVN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fb17791c5b7b8fffa2e19f0d066c78b7_JaffaCakes118
Files
-
fb17791c5b7b8fffa2e19f0d066c78b7_JaffaCakes118.exe windows:4 windows x86 arch:x86
dc1ef5580910a2abc273512b30c8344e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadWritePtr
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetDriveTypeA
GetFileType
SetStdHandle
HeapSize
HeapReAlloc
ExitThread
TerminateProcess
GetACP
GetSystemTime
GetTimeZoneInformation
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
GetCurrentDirectoryA
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GlobalFlags
GetDiskFreeSpaceA
GetFileTime
GetTempFileNameA
GetCurrentThread
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcmpA
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
MulDiv
SetLastError
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
LockResource
FormatMessageA
WideCharToMultiByte
GetVersion
GetVersionExA
FreeLibrary
LocalSize
GlobalSize
GlobalFree
GetSystemDirectoryA
lstrcatA
CopyFileA
GetLocalTime
WinExec
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
ExitProcess
DeleteCriticalSection
CancelIo
InterlockedExchange
GetQueuedCompletionStatus
CreateIoCompletionPort
GetSystemInfo
EnterCriticalSection
PostQueuedCompletionStatus
LeaveCriticalSection
InitializeCriticalSection
GetPrivateProfileIntA
GetPrivateProfileStringA
GetModuleFileNameA
WritePrivateProfileStringA
SetUnhandledExceptionFilter
FindResourceA
LoadResource
SizeofResource
DeleteFileA
LoadLibraryA
GetProcAddress
lstrcpyA
CreateDirectoryA
MoveFileA
RemoveDirectoryA
ReadFile
SetFilePointer
WriteFile
CreateFileA
GetFileSize
FindFirstFileA
FindNextFileA
FindClose
lstrcpynA
LocalAlloc
LocalFree
GetLogicalDriveStringsA
GetVolumeInformationA
GetDiskFreeSpaceExA
GetFileAttributesA
GlobalAlloc
GlobalLock
GlobalUnlock
GetTickCount
VirtualAlloc
VirtualFree
Sleep
CreateThread
ResumeThread
SetEvent
WaitForSingleObject
TerminateThread
CloseHandle
CreateEventA
InterlockedIncrement
lstrlenA
MultiByteToWideChar
GetLastError
InterlockedDecrement
UnhandledExceptionFilter
user32
GetTopWindow
IsChild
GetCapture
WinHelpA
RegisterClassA
GetMenu
GetWindowTextLengthA
GetWindowTextA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
GetWindowPlacement
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
SetMenuDefaultItem
TrackPopupMenu
GetMenuItemID
IsWindow
IsIconic
GetClipboardData
DrawTextA
CheckMenuItem
GetMenuState
GetSysColorBrush
MessageBoxA
DispatchMessageA
UnregisterClassA
HideCaret
ShowCaret
ShowScrollBar
DrawIconEx
IntersectRect
CheckMenuRadioItem
SetClassLongA
FindWindowA
SetForegroundWindow
LoadBitmapA
GetSystemMenu
AppendMenuA
MessageBeep
GetSystemMetrics
DrawEdge
RedrawWindow
GetDesktopWindow
GetScrollRange
SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
EqualRect
AdjustWindowRectEx
SetFocus
CharNextA
DeleteMenu
GetMenuItemCount
EnableMenuItem
GetFocus
SetScrollPos
GetDlgCtrlID
SetWindowPos
IsWindowVisible
UpdateWindow
ScreenToClient
GetWindow
OpenClipboard
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
TranslateMessage
GetMessageA
LoadIconA
SendMessageA
EnableWindow
SetRect
DestroyMenu
DestroyCursor
DestroyIcon
GetWindowLongA
GetNextDlgTabItem
GetParent
SetCursor
InvalidateRect
GetActiveWindow
WindowFromPoint
ClientToScreen
PostMessageA
TrackPopupMenuEx
GetSubMenu
GetWindowRect
DrawFocusRect
InflateRect
CopyRect
GetClientRect
OffsetRect
FillRect
GetSysColor
ReleaseDC
GetDC
GetIconInfo
LoadImageA
PeekMessageA
MapWindowPoints
GetDlgItemTextA
SetDlgItemTextA
IsDlgButtonChecked
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
SetMenuItemBitmaps
ModifyMenuA
GetMenuCheckMarkDimensions
wvsprintfA
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
GrayStringA
LoadStringA
CharUpperA
IsZoomed
PostQuitMessage
ShowOwnedPopups
ValidateRect
RegisterClipboardFormatA
SetWindowContextHelpId
MapDialogRect
LoadAcceleratorsA
TranslateAcceleratorA
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
GetScrollPos
wsprintfA
SendDlgItemMessageA
SetScrollRange
LoadMenuA
LoadCursorA
DefWindowProcA
GetClassInfoA
GetCursor
DrawFrameControl
SetRectEmpty
SetTimer
SetCapture
ReleaseCapture
PostThreadMessageA
GetKeyState
CopyAcceleratorTableA
GetNextDlgGroupItem
GetDCEx
LockWindowUpdate
SetParent
GetClassNameA
SetCursorPos
KillTimer
PtInRect
GetCursorPos
SystemParametersInfoA
CloseClipboard
SetClipboardData
EmptyClipboard
gdi32
SetMapMode
SetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
CreateRectRgn
StretchDIBits
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePatternBrush
PtVisible
RectVisible
Escape
GetMapMode
PatBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
DPtoLP
GetTextMetricsA
GetCharWidthA
CreateFontA
LPtoDP
GetTextColor
GetBkColor
CreateDIBSection
GetTextExtentPoint32A
SetPixelV
StretchBlt
PtInRegion
CreateFontIndirectA
Rectangle
PlgBlt
FillRgn
CreatePolygonRgn
GetObjectA
GetPixel
CreateBitmap
SelectObject
RestoreDC
SaveDC
GetClipBox
CreatePen
SetBkMode
CreateDIBitmap
GetTextExtentPointA
TextOutA
CreateSolidBrush
ExtTextOutA
SetBkColor
SetTextColor
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetStockObject
OffsetViewportOrgEx
DeleteObject
comdlg32
GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegDeleteValueA
RegCloseKey
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
SetFileSecurityA
GetFileSecurityA
RegSetValueA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
shell32
SHGetFileInfoA
ord71
DragQueryFileA
DragFinish
Shell_NotifyIconA
ExtractIconA
ShellExecuteA
ShellExecuteExA
comctl32
ImageList_Create
ImageList_Destroy
ord17
ImageList_AddMasked
ImageList_ReplaceIcon
_TrackMouseEvent
oledlg
ord8
ole32
CoTaskMemAlloc
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
CoTaskMemFree
CoRevokeClassObject
CoGetClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoUninitialize
CoInitialize
CLSIDFromString
CLSIDFromProgID
OleFlushClipboard
olepro32
ord253
oleaut32
SysStringLen
VariantCopy
SysAllocString
VariantChangeType
VariantTimeToSystemTime
SysAllocStringLen
SysAllocStringByteLen
VariantClear
SysFreeString
skinh
SkinH_AttachRes
shlwapi
SHAutoComplete
PathRemoveFileSpecA
ws2_32
listen
bind
ntohs
getsockname
accept
setsockopt
WSAEventSelect
WSACreateEvent
WSASocketA
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSAIoctl
WSAGetLastError
WSARecv
WSASend
socket
connect
recv
htons
inet_ntoa
getpeername
select
__WSAFDIsSet
ioctlsocket
send
WSAStartup
gethostname
gethostbyname
WSACleanup
closesocket
WSACloseEvent
pdh
PdhOpenQueryA
PdhCollectQueryData
PdhAddCounterA
PdhCloseQuery
PdhGetFormattedCounterValue
avifil32
AVIFileExit
AVIStreamSetFormat
AVIFileCreateStreamA
AVIFileOpenA
AVIStreamWrite
AVIFileRelease
AVIFileInit
AVIStreamRelease
msvfw32
ICCompressorFree
DrawDibOpen
ICDecompress
ICSeqCompressFrameStart
DrawDibDraw
ICSeqCompressFrameEnd
DrawDibClose
ICClose
ICOpen
ICSendMessage
winmm
waveInGetNumDevs
waveOutPrepareHeader
waveOutOpen
waveOutGetNumDevs
PlaySoundA
sndPlaySoundA
waveInOpen
waveInPrepareHeader
waveInAddBuffer
waveInStart
waveOutWrite
waveInStop
waveInReset
waveInUnprepareHeader
waveInClose
waveOutReset
waveOutUnprepareHeader
waveOutClose
wininet
InternetGetLastResponseInfoA
FtpPutFileA
InternetConnectA
InternetSetStatusCallback
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetCloseHandle
Sections
.text Size: 412KB - Virtual size: 408KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 932KB - Virtual size: 931KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ