Static task
static1
Behavioral task
behavioral1
Sample
ff8b6ed41346aca7f5e15bf438e6f4b2_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
ff8b6ed41346aca7f5e15bf438e6f4b2_JaffaCakes118.exe
Resource
win10v2004-20240412-en
General
-
Target
ff8b6ed41346aca7f5e15bf438e6f4b2_JaffaCakes118
-
Size
173KB
-
MD5
ff8b6ed41346aca7f5e15bf438e6f4b2
-
SHA1
9386a5793c80e7cd1340d6a1268f1d07a953287d
-
SHA256
48d7c4d3d9479c4e2f2fa9d83336c77169313b4be9651d0b71705caeaa715dc7
-
SHA512
2362267a12addeecd21839d4369198465025bbe9e58517e0078fab1841328e9c8ac6c7856c81c733c174df002efa32f23b02347b8d2a28f54fb142e868c0cd8f
-
SSDEEP
3072:W0nsrhk6lU2RxDDPpLcEPIySV9huzkv3XnZ8OipDnXB5MlcsMD2Uwh34A7UmPR01:Qrhk6lU2Rxfpy3V9hdZ8OkLxTKUpA7Uz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff8b6ed41346aca7f5e15bf438e6f4b2_JaffaCakes118
Files
-
ff8b6ed41346aca7f5e15bf438e6f4b2_JaffaCakes118.exe windows:4 windows x86 arch:x86
618838ad34bfe5982ef51246622a6c07
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExW
GetLastError
MapViewOfFile
DeleteFileA
VerifyVersionInfoW
RemoveDirectoryA
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
CreateProcessA
Sleep
lstrlenA
UnmapViewOfFile
IsBadReadPtr
ReadFile
FindFirstFileA
FindClose
lstrcmpiA
lstrcpynA
WriteFile
GetDriveTypeA
SetFilePointer
GetFileAttributesA
GetPrivateProfileIntA
CreateEventA
QueryPerformanceFrequency
lstrcatA
ReleaseMutex
GetSystemDefaultLangID
CreateMutexA
SetErrorMode
GetSystemDirectoryA
MulDiv
GetPrivateProfileStringA
GetPrivateProfileSectionNamesA
FlushFileBuffers
SetStdHandle
LoadLibraryA
FreeLibrary
GetDiskFreeSpaceA
GetTickCount
FindResourceExA
GetWindowsDirectoryA
InterlockedDecrement
LocalFree
InterlockedIncrement
FormatMessageA
GetTempPathA
GetVersionExA
CreateFileA
GlobalFree
FindResourceA
LoadResource
SizeofResource
GlobalAlloc
LockResource
GlobalLock
GlobalUnlock
WaitForSingleObject
SetLastError
ExitProcess
lstrcpyA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
HeapCreate
IsBadCodePtr
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetEnvironmentVariableA
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetOEMCP
GetACP
GetCPInfo
GetCommandLineA
GetStartupInfoA
RaiseException
HeapAlloc
HeapFree
RtlUnwind
UnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
HeapSize
LCMapStringW
LCMapStringA
IsBadWritePtr
HeapReAlloc
SearchPathA
FindNextFileA
GetTempFileNameA
GetExitCodeProcess
OpenProcess
CompareFileTime
GetProcessTimes
TerminateProcess
GetLocalTime
InitializeCriticalSection
GetCurrentProcessId
GetVersion
LeaveCriticalSection
EnterCriticalSection
GetCurrentThread
VirtualProtect
ResetEvent
SetEvent
QueryPerformanceCounter
SystemTimeToFileTime
lstrcmpA
MoveFileExA
InterlockedExchange
DeleteCriticalSection
VirtualAlloc
user32
CharLowerA
IsWindowVisible
SetDlgItemTextA
SendDlgItemMessageA
CheckDlgButton
IsDlgButtonChecked
GetDlgItemTextA
GetDlgItemInt
IsChild
GetDialogBaseUnits
GetDoubleClickTime
CreateDialogParamA
RegisterWindowMessageA
CheckRadioButton
ShowScrollBar
SetScrollInfo
GetScrollInfo
GetDlgCtrlID
GetWindowTextLengthA
GetLastActivePopup
WaitMessage
GetUpdateRect
GetMessageTime
ExcludeUpdateRgn
GetUpdateRgn
ValidateRect
IsRectEmpty
InvertRect
FrameRect
SetParent
RegisterClipboardFormatA
IsClipboardFormatAvailable
GetPriorityClipboardFormat
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardFormatNameA
SetClipboardData
GetClipboardData
GetCaretPos
SetCaretPos
CreateCaret
DestroyCaret
BeginPaint
EndPaint
GetWindowDC
VkKeyScanA
SetClassLongA
DestroyCursor
EnumChildWindows
DeferWindowPos
EndDeferWindowPos
BeginDeferWindowPos
DdeCreateDataHandle
DdeGetData
DdeCmpStringHandles
DdeKeepStringHandle
GetForegroundWindow
DdeEnableCallback
DdeUninitialize
DdeInitializeA
DdeNameService
DdeClientTransaction
DdeDisconnect
DdeFreeStringHandle
DdeCreateStringHandleA
DdeConnect
DdeGetLastError
DdeQueryStringA
DrawTextA
LoadCursorA
DialogBoxIndirectParamA
GetDC
ReleaseDC
EnumThreadWindows
IsCharAlphaA
RemovePropA
SetPropA
TrackPopupMenu
InflateRect
ShowCaret
HideCaret
SetActiveWindow
InvalidateRgn
RegisterClassA
RegisterClassExA
GetClassInfoA
UnregisterClassA
CreateWindowExA
GetMenuItemID
EnableMenuItem
DrawMenuBar
GetSystemMenu
RemoveMenu
GetMenuStringA
GetSubMenu
LoadMenuA
ModifyMenuA
CheckMenuItem
DefMDIChildProcA
GetWindowPlacement
SetWindowPos
GetWindow
GetTopWindow
DeleteMenu
GetDlgItem
EndDialog
GetWindowTextA
SetWindowTextA
PostMessageA
IsWindow
LoadIconA
CreateMenu
AppendMenuA
SetMenu
DefFrameProcA
PostQuitMessage
SetWindowsHookExA
UnhookWindowsHookEx
GetMessagePos
GetMenu
GetMenuItemCount
ReplyMessage
IsDialogMessageA
TranslateMDISysAccel
IsZoomed
KillTimer
FlashWindow
EqualRect
DestroyMenu
GetSystemMetrics
LoadBitmapA
SetMessageQueue
MessageBoxA
CallNextHookEx
IsIconic
EnableWindow
GetActiveWindow
IsWindowEnabled
GetAsyncKeyState
SetFocus
InSendMessage
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
GetClassLongA
ShowWindow
SetCapture
SetRect
PeekMessageA
GetKeyState
ReleaseCapture
IsCharAlphaNumericA
FillRect
InvalidateRect
ClientToScreen
DdePostAdvise
DdeAccessData
DdeUnaccessData
SetForegroundWindow
InsertMenuA
DdeFreeDataHandle
GetPropA
DdeAddData
PtInRect
CallWindowProcA
CharUpperA
GetFocus
GetSysColor
DrawFocusRect
GetWindowRect
ScreenToClient
MoveWindow
SetWindowLongA
DefWindowProcA
DestroyWindow
GetScrollPos
SetScrollRange
GetWindowLongA
GetParent
BringWindowToTop
GetScrollRange
UpdateWindow
ScrollWindow
SetScrollPos
GetClientRect
IntersectRect
OffsetRect
ShowCursor
MessageBeep
GetCapture
GetCursorPos
WindowFromPoint
SetCursor
SendMessageA
GetClassInfoExA
shell32
ExtractIconA
Shell_NotifyIconA
ShellExecuteA
advapi32
RegQueryValueExW
RegEnumValueA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyExW
ole32
OleUninitialize
CoQueryProxyBlanket
CoPushServiceDomain
OleInitialize
Sections
.text Size: 147KB - Virtual size: 147KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 320B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ