Static task
static1
Behavioral task
behavioral1
Sample
22ee057df01e2d5a1ea98cb6ddccac6e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
22ee057df01e2d5a1ea98cb6ddccac6e_JaffaCakes118.exe
Resource
win10v2004-20240419-en
General
-
Target
22ee057df01e2d5a1ea98cb6ddccac6e_JaffaCakes118
-
Size
608KB
-
MD5
22ee057df01e2d5a1ea98cb6ddccac6e
-
SHA1
56f2497b9dbcb9eeb2ba53d61ec8aa82363fae0d
-
SHA256
71e869cdec1c4e01a467dae328fe29f7f6cc542d6d41cad098591fd275dc0007
-
SHA512
5789300e74c0bde864931432f80856a3fb5d8039d2609156e2872a1d246ec4a3cfceaa0f8a21ba8da7e13ea82ca50d556f7458282e7b7241809d4090290f2fab
-
SSDEEP
12288:BV4sPzhK43pOuoaT/AewoPJ0i22qWmYhK43pOuoaT/AewoP7:Bms7hKuzJwmSi2ruhKuzJwm7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 22ee057df01e2d5a1ea98cb6ddccac6e_JaffaCakes118
Files
-
22ee057df01e2d5a1ea98cb6ddccac6e_JaffaCakes118.exe windows:4 windows x86 arch:x86
d07701783881ba30549863ad4b9370f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
SetTokenInformation
GetSecurityDescriptorDacl
ImpersonateNamedPipeClient
SetThreadToken
msvcrt
_setmbcp
_setsystime
__dllonexit
_onexit
atoi
_wmkdir
ldiv
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
setbuf
_controlfp
wcscpy
imm32
ImmConfigureIMEA
ImmSetCompositionFontA
ImmUnregisterWordA
ImmSetCompositionStringA
ImmGetCandidateListA
ImmGetCompositionFontA
ImmGetCompositionStringA
ImmReleaseContext
ImmGetProperty
ImmGetDefaultIMEWnd
ImmGetConversionListA
user32
DrawIcon
FindWindowW
ToAscii
DdeAccessData
InvalidateRgn
LoadCursorFromFileW
GetLastActivePopup
InSendMessage
DestroyAcceleratorTable
DrawCaption
ShowWindow
GetWindowTextA
SetRectEmpty
SetWindowTextW
MapVirtualKeyExW
GetWindowWord
SetCaretPos
VkKeyScanW
PeekMessageW
CreateMenu
SetWindowRgn
BeginPaint
GrayStringA
GetDC
DdeQueryStringA
VkKeyScanExA
EnumDisplaySettingsW
DdeFreeStringHandle
DrawFrameControl
GetKeyboardState
DrawStateW
NotifyWinEvent
LoadIconA
GetKeyNameTextW
IsIconic
DialogBoxParamA
ReuseDDElParam
DialogBoxIndirectParamA
GetClipboardViewer
GetMessageA
EnableScrollBar
GetMenuItemID
SetMenu
CopyAcceleratorTableW
GetCursorPos
GetWindowLongA
DispatchMessageW
GetWindowThreadProcessId
IsWindowEnabled
UnhookWindowsHook
GetCursor
SetClassLongA
TrackPopupMenuEx
GetMenu
MessageBoxExW
GetMenuItemRect
GetQueueStatus
ChangeClipboardChain
FindWindowExW
SetWindowLongA
GetMessageW
GetCaretPos
PostMessageW
GetClipboardData
MoveWindow
GetDlgItemTextW
RegisterClipboardFormatA
GetWindowLongW
SetWindowLongW
CreateDesktopW
GetMenuItemCount
SetCaretBlinkTime
IsDlgButtonChecked
GetClassInfoExW
GetKeyboardLayout
FindWindowA
TranslateMDISysAccel
ScrollWindowEx
DefWindowProcW
ReleaseDC
LoadCursorW
LoadMenuW
OemToCharA
ValidateRgn
EnumChildWindows
KillTimer
SetWinEventHook
DeferWindowPos
CharLowerBuffW
WinHelpW
IsDialogMessageA
MessageBoxA
PostThreadMessageW
GetProcessWindowStation
DispatchMessageA
GetDlgItemTextA
RegisterHotKey
GetScrollPos
UpdateWindow
GetClipboardFormatNameW
LockWindowUpdate
CharLowerBuffA
SendMessageA
GetClientRect
GetSystemMetrics
SystemParametersInfoW
EnableWindow
gdi32
Polygon
StartDocA
GetEnhMetaFileHeader
CreateSolidBrush
SetPolyFillMode
SetBitmapBits
ExtTextOutA
Escape
AbortPath
GetEnhMetaFileDescriptionW
SetRectRgn
Ellipse
SetViewportExtEx
EndDoc
CreateRectRgnIndirect
DeleteColorSpace
ExtSelectClipRgn
CloseEnhMetaFile
SetBkMode
GetTextExtentPointA
GetGlyphOutlineA
CombineRgn
SaveDC
GetEnhMetaFilePaletteEntries
GetBkMode
CreateDCA
StretchBlt
GetClipRgn
ExtEscape
SetAbortProc
ScaleWindowExtEx
RestoreDC
PolyBezierTo
CreateMetaFileW
CreateHatchBrush
CloseFigure
TextOutA
GetTextExtentPoint32W
CancelDC
GetWindowOrgEx
CreateCompatibleBitmap
GetNearestPaletteIndex
CreateFontIndirectW
GetCurrentObject
UnrealizeObject
Arc
GetRegionData
EnumFontFamiliesA
GetTextFaceA
MaskBlt
CreateCompatibleDC
EqualRgn
WidenPath
GetObjectType
SelectPalette
GetTextAlign
GetDIBits
SetGraphicsMode
GetObjectA
SetWindowOrgEx
SetPixelV
CreateMetaFileA
GetMapMode
PolyDraw
DeleteDC
GetTextExtentPoint32A
CreateRectRgn
Rectangle
GetCharABCWidthsA
GetEnhMetaFileBits
StrokePath
SetDIBColorTable
SetColorAdjustment
GetDeviceCaps
SetMetaRgn
GetOutlineTextMetricsW
SetColorSpace
ResetDCW
SetWorldTransform
PlayEnhMetaFileRecord
MoveToEx
SetBrushOrgEx
GetTextExtentExPointW
SetViewportOrgEx
GetKerningPairsA
EnumEnhMetaFile
PtVisible
EnumFontsA
GetBitmapBits
GetCharABCWidthsW
PlayMetaFile
CopyEnhMetaFileW
OffsetViewportOrgEx
GetClipBox
CreateEllipticRgn
LPtoDP
RoundRect
CopyEnhMetaFileA
EnumFontsW
EndPath
CreateEnhMetaFileW
GetRgnBox
GetOutlineTextMetricsA
DeleteObject
OffsetRgn
GetStockObject
CreateDIBPatternBrushPt
SetWinMetaFileBits
GetViewportOrgEx
PlayEnhMetaFile
IntersectClipRect
GetPixel
GetTextMetricsW
GetEnhMetaFileW
CreateFontA
GetDCOrgEx
DeleteEnhMetaFile
Polyline
GetWorldTransform
Pie
ResizePalette
GetMetaFileBitsEx
SetPixel
GetTextCharsetInfo
RectInRegion
PlayMetaFileRecord
GetWinMetaFileBits
BeginPath
PatBlt
GetBkColor
SetBkColor
GetROP2
DPtoLP
kernel32
GetConsoleTitleW
GetModuleHandleA
GetStartupInfoA
GetDefaultCommConfigW
mfc42
ord1727
ord5065
ord3749
ord6376
ord2055
ord1090
ord4441
ord4837
ord3798
ord5280
ord4353
ord6374
ord5163
ord2385
ord1091
ord4407
ord1775
ord4078
ord6052
ord4998
ord4853
ord4376
ord5265
ord641
ord2514
ord815
ord561
ord3738
ord4424
ord1050
ord4080
ord5261
ord4425
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord1018
ord4465
ord3259
ord1012
ord2982
ord5714
ord1018
ord5307
ord4698
ord1082
ord2725
ord5302
ord1007
ord3346
ord2396
ord1055
ord1089
ord3922
ord5731
ord1058
ord2554
ord4486
ord6375
ord4274
ord1002
ord1095
ord1087
ord1078
ord3079
ord4627
ord1011
ord324
ord4234
ord4710
ord1168
ord1072
ord755
ord1576
ord470
ord2379
ord3825
Sections
.text Size: 360KB - Virtual size: 359KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 216KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ