Static task
static1
Behavioral task
behavioral1
Sample
27218f3e3ad161ad86b3c599c9c7ea13_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
27218f3e3ad161ad86b3c599c9c7ea13_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
27218f3e3ad161ad86b3c599c9c7ea13_JaffaCakes118
-
Size
336KB
-
MD5
27218f3e3ad161ad86b3c599c9c7ea13
-
SHA1
b4eb82e32f83b49e33995fbd9753480c9ef65165
-
SHA256
0ab4f1d946f9490a33caffeea59cb1804153e9cd0cfc0718150445f848d16043
-
SHA512
8b48dc4aa817faa1c32d33d5bf9860a2922cd1b7d7d94dd97c35d27264fad23f9ab64be735021c5523023bf1b548a352e8736ee4847407548921c5ab27361a85
-
SSDEEP
6144:hn2N3RE4bQWd1YUd2bLE6Bc2Oa+QdAdFAMcrew/:h83RECYUsZea+UVMcrF/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27218f3e3ad161ad86b3c599c9c7ea13_JaffaCakes118
Files
-
27218f3e3ad161ad86b3c599c9c7ea13_JaffaCakes118.exe windows:4 windows x86 arch:x86
e52db2151f010237b5c490991a7d01b0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMessagePos
CopyAcceleratorTableW
CloseClipboard
UnhookWinEvent
CopyIcon
IntersectRect
IsIconic
GetClassInfoW
DestroyAcceleratorTable
SetCaretPos
InsertMenuA
WindowFromPoint
GetScrollPos
SetKeyboardState
VkKeyScanW
CharToOemA
DestroyMenu
CreateIconFromResourceEx
SendNotifyMessageA
CreateIconFromResource
DdeConnectList
InSendMessage
DispatchMessageW
CreateWindowStationW
GetClipboardData
GetForegroundWindow
DefWindowProcA
GetClipboardViewer
RegisterClipboardFormatA
DrawIcon
ScrollWindow
ShowCursor
GetSystemMetrics
PostQuitMessage
SendNotifyMessageW
DispatchMessageA
CreateDialogIndirectParamA
DialogBoxIndirectParamA
BringWindowToTop
SetWindowPlacement
UnionRect
CharNextW
UnpackDDElParam
BlockInput
DrawIconEx
CharPrevA
LoadMenuA
GetKeyboardState
SetScrollPos
CheckRadioButton
IsClipboardFormatAvailable
GetWindowModuleFileNameA
SetClassLongA
OemToCharBuffA
WaitMessage
GetClipCursor
TranslateAcceleratorA
GetWindowThreadProcessId
SetCapture
CheckMenuItem
DrawTextExA
wvsprintfA
DeferWindowPos
LoadAcceleratorsA
ToAscii
IsCharLowerA
SetPropA
SendInput
GetClassInfoA
IsDialogMessageA
GetTabbedTextExtentA
LoadCursorA
GetMenuItemCount
RegisterClipboardFormatW
GetSysColor
CharPrevW
LoadKeyboardLayoutW
SetCaretBlinkTime
GetMessageA
GetFocus
RegisterHotKey
CharLowerA
SystemParametersInfoW
SetClassLongW
SetTimer
InvalidateRect
ChangeClipboardChain
GetDlgItem
GrayStringW
GetClipboardFormatNameW
IsWindowVisible
ShowScrollBar
RegisterWindowMessageA
WinHelpA
PeekMessageW
EnableScrollBar
FindWindowW
RemoveMenu
SetWindowLongW
LoadStringW
FindWindowA
MessageBeep
BeginDeferWindowPos
SendDlgItemMessageA
DdeFreeStringHandle
GetWindowWord
LoadBitmapA
ClientToScreen
CallMsgFilterA
GetMessageExtraInfo
SetForegroundWindow
GetCaretPos
ShowCaret
CharUpperW
GetDlgCtrlID
IsMenu
InsertMenuW
FrameRect
GetScrollInfo
SendDlgItemMessageW
GetClassNameW
MapVirtualKeyExA
DdeAccessData
DrawFrameControl
DialogBoxIndirectParamW
mouse_event
ModifyMenuA
GetDC
SetRect
GetUserObjectInformationW
CharNextA
MapVirtualKeyExW
DrawStateW
CreateWindowExW
MapVirtualKeyA
RemovePropA
LockWindowUpdate
TranslateMessage
RegisterClassExW
TranslateAcceleratorW
ChildWindowFromPointEx
IsDlgButtonChecked
GetCursorPos
SetWindowTextA
CharUpperA
AppendMenuW
AdjustWindowRect
GetMenuItemID
PtInRect
TrackPopupMenuEx
GetKeyNameTextW
ChangeDisplaySettingsA
LoadBitmapW
SetCursor
FindWindowExW
DdeClientTransaction
GetWindowLongW
GetWindowTextA
GetParent
VkKeyScanExA
GetSysColorBrush
DrawTextA
WinHelpW
SetFocus
GetQueueStatus
GetDlgItemTextW
GetLastActivePopup
DestroyCursor
mpr
WNetAddConnectionA
WNetDisconnectDialog
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
atol
_putch
_rotr
_onexit
__dllonexit
scanf
_hypot
gdi32
CreateDCA
BitBlt
GetBkColor
GetObjectType
BeginPath
DeleteObject
CreateFontW
GetKerningPairsA
GetDeviceCaps
CreateEllipticRgn
RectVisible
SetBkMode
CreateDIBSection
LPtoDP
EnumFontFamiliesA
GetBitmapBits
GetBrushOrgEx
oleaut32
LPSAFEARRAY_UserFree
VARIANT_UserFree
advapi32
EnumDependentServicesA
RegCreateKeyExW
DeleteService
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerA
RegEnumKeyExA
ChangeServiceConfigA
GetUserNameA
OpenSCManagerW
RegQueryInfoKeyA
RegCreateKeyA
ChangeServiceConfig2A
InitiateSystemShutdownA
LockServiceDatabase
RegDeleteKeyA
QueryServiceConfigW
SetServiceObjectSecurity
EnumServicesStatusA
RegEnumKeyW
RegSetValueExA
ReadEventLogW
RegOpenKeyExW
LsaFreeMemory
OpenServiceA
RegOpenKeyExA
LogonUserA
ControlService
GetServiceDisplayNameW
LsaOpenPolicy
StartServiceCtrlDispatcherA
ChangeServiceConfigW
ReportEventW
RegOverridePredefKey
RegUnLoadKeyW
RegCloseKey
CreateServiceW
LsaQueryInformationPolicy
RegQueryValueW
ReportEventA
RegQueryInfoKeyW
RegQueryValueA
SetNamedSecurityInfoA
GetTrusteeFormA
GetTrusteeTypeA
RegCreateKeyW
RegNotifyChangeKeyValue
DecryptFileW
OpenSCManagerA
RegConnectRegistryA
RegSetValueExW
RegCreateKeyExA
RegisterServiceCtrlHandlerW
GetUserNameW
CreateProcessAsUserW
QueryServiceLockStatusW
RegRestoreKeyW
RegisterEventSourceA
mfc42
ord1047
ord5731
ord3922
ord1089
ord1017
ord2396
ord1052
ord1048
ord5302
ord1058
ord1010
ord1039
ord5307
ord1090
ord5714
ord1003
ord2982
ord1031
ord3259
ord4486
ord6375
ord2725
ord815
ord4465
ord1078
ord3262
ord2985
ord3081
ord2976
ord1095
ord3830
ord3831
ord3825
ord3079
ord4080
ord1030
ord4424
ord3738
ord561
ord1168
ord1576
Sections
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ