Static task
static1
Behavioral task
behavioral1
Sample
42873e319aee6ae7e9caef062bf02bdd_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
42873e319aee6ae7e9caef062bf02bdd_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
42873e319aee6ae7e9caef062bf02bdd_JaffaCakes118
-
Size
3.1MB
-
MD5
42873e319aee6ae7e9caef062bf02bdd
-
SHA1
541a77eabffb7e919304972c2477e35a92dad7da
-
SHA256
bbeb0cac03462e1b9eeea5a446e4c47e9c4a2f19271b2fe5938570c7a0417cb5
-
SHA512
bd43fa8b9afc52641d44c0ceee71f142fbf34fdbb99b47de20a1451a4448f7c42470b575c8fe29b8893f780bad0b0e45b1ad002bf99bf18e92fd6e319cf467c5
-
SSDEEP
49152:0YbVSfzuy0ezi+e3Z6kRqDq8mO/9Wv0vM:0FL0ezZk4NmO/4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42873e319aee6ae7e9caef062bf02bdd_JaffaCakes118
Files
-
42873e319aee6ae7e9caef062bf02bdd_JaffaCakes118.exe windows:4 windows x86 arch:x86
f378a1719df47af90bd4dd84f89e4667
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
libmcl-4.4.0
MclGetFileInfo
MclImgCreate
MclImgSetPixels
MclWriteImage
MclImgFree
MclListCreate
MclListAdd
MclListGetSampleCount
MclListGetAudioFormat
MclListFree
MclReadOpen
MclSndCreate
MclReadSound
MclWriteSound
MclReadClose
MclSndFree
MclWriteClose
MclFree
MclRegister
MclLogExtra
MclCreate
MclVideoSetFileName
MclAudioSetFileName
MclSetFormatPreset
MclAudioSetCodec
MclAudioSetFormat
MclVideoSetAspectRatio
winmm
waveOutUnprepareHeader
waveInUnprepareHeader
mciSendStringA
mmioInstallIOProcA
mmioOpenA
mmioDescend
mmioSeek
mmioRead
mmioClose
midiStreamStop
midiOutUnprepareHeader
midiStreamClose
msacm32
acmStreamOpen
acmStreamSize
acmStreamPrepareHeader
acmStreamConvert
acmStreamUnprepareHeader
acmMetrics
acmStreamClose
kernel32
LocalAlloc
MulDiv
LocalLock
LocalUnlock
LocalReAlloc
GetFullPathNameA
lstrcatA
GetCurrentThreadId
RemoveDirectoryA
EndUpdateResourceA
BeginUpdateResourceA
_lclose
UpdateResourceA
_llseek
_lread
_lopen
GetModuleFileNameA
GetDiskFreeSpaceA
GetLocalTime
OpenFile
_lwrite
ReadFile
WriteFile
SetFilePointer
GetFileSize
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
CreateFileA
GlobalSize
lstrlenA
SetEvent
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetVersion
SetLastError
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
GetPrivateProfileIntA
GetPrivateProfileStringA
GetLastError
DuplicateHandle
GetCurrentProcess
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileA
DeleteFileA
FindClose
FindFirstFileA
GetVolumeInformationA
CreateMutexA
ReleaseMutex
GetFileTime
lstrcmpA
FileTimeToSystemTime
FileTimeToLocalFileTime
GlobalFlags
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
TlsFree
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
TlsGetValue
GetProcessVersion
GetCPInfo
GetOEMCP
SetErrorMode
GetCurrentDirectoryA
RtlUnwind
FindNextFileA
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetTimeZoneInformation
GetSystemTime
GetDriveTypeA
GetStartupInfoA
GetCommandLineA
HeapReAlloc
RaiseException
GetACP
HeapSize
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LocalFree
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
InterlockedExchange
OutputDebugStringA
GlobalUnlock
GlobalLock
GlobalAlloc
GetVersionExA
WritePrivateProfileStringA
GetShortPathNameA
CopyFileA
SetFileAttributesA
GetFileAttributesA
GetWindowsDirectoryA
CreateEventA
GetProcAddress
SizeofResource
LockResource
LoadResource
FindResourceA
GetModuleHandleA
GetTempFileNameA
GetTempPathA
LoadLibraryA
FreeLibrary
CloseHandle
ResetEvent
WaitForSingleObject
Sleep
SetThreadPriority
CreateThread
lstrcpynA
GetTickCount
CreateDirectoryA
GetCurrentThread
SearchPathA
GetProfileIntA
GlobalFree
GlobalHandle
GlobalReAlloc
GetStringTypeA
user32
LoadCursorA
ClientToScreen
SetCursor
DispatchMessageA
TranslateMessage
GetCursorPos
DeleteMenu
GetSubMenu
LoadMenuA
GetCapture
SetScrollPos
GetScrollRange
GetScrollPos
CharUpperA
wsprintfA
MessageBoxA
IsWindowEnabled
GetDlgItem
DestroyWindow
CreateDialogIndirectParamA
GetActiveWindow
EndDialog
GetNextDlgTabItem
GetWindowPlacement
RegisterWindowMessageA
SetForegroundWindow
GetForegroundWindow
GetLastActivePopup
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DefWindowProcA
GetKeyState
TrackPopupMenu
GetMenuItemID
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
IsChild
GetTopWindow
SetScrollInfo
GetScrollInfo
IsWindowVisible
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
EqualRect
AdjustWindowRectEx
PeekMessageA
MapWindowPoints
SendDlgItemMessageA
IsDialogMessageA
SetWindowTextA
ShowWindow
EnableMenuItem
CheckMenuItem
DrawFocusRect
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
GrayStringA
LoadStringA
WindowFromPoint
GetMessageA
SetRect
DestroyMenu
PostQuitMessage
GetDesktopWindow
GetSysColorBrush
GetDCEx
LockWindowUpdate
SetParent
ScreenToClient
wvsprintfA
SetCapture
SetFocus
ReleaseCapture
SetActiveWindow
UpdateWindow
CopyRect
DrawEdge
IsWindow
LoadImageA
PostMessageA
GetWindowLongA
SetWindowLongA
RedrawWindow
IsIconic
DrawIcon
GetSystemMetrics
LoadIconA
GetDC
ReleaseDC
SystemParametersInfoA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetSysColor
KillTimer
MessageBeep
SetTimer
SendMessageA
EnableWindow
PtInRect
GetParent
InvalidateRect
GetClientRect
GetWindowRect
DrawTextA
IntersectRect
ValidateRect
GetWindow
OffsetRect
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CallNextHookEx
GetMessagePos
UnhookWindowsHookEx
SetWindowPos
GetClassNameA
SetWindowsHookExA
InflateRect
DrawFrameControl
SetMenuItemBitmaps
IsRectEmpty
LoadBitmapA
GetFocus
IsWindowUnicode
CharNextA
DefDlgProcA
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
SetRectEmpty
gdi32
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetROP2
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
GetTextExtentPointA
GetTextMetricsA
GetCharWidthA
SetRectRgn
PatBlt
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreatePatternBrush
ExtSelectClipRgn
RestoreDC
SaveDC
SetBkColor
GetClipBox
GetDIBits
GetNearestPaletteIndex
SetTextColor
SetBkMode
GdiFlush
CreateDIBitmap
GetPaletteEntries
SetStretchBltMode
SetBrushOrgEx
StretchDIBits
CreateDIBSection
DeleteDC
GetTextColor
GetTextExtentPoint32A
CreateRectRgnIndirect
CreateRectRgn
CombineRgn
GetCurrentObject
CreateFontIndirectA
CreatePen
CreateCompatibleBitmap
GetDeviceCaps
SelectPalette
RealizePalette
CreateBitmap
CreateHalftonePalette
GetDIBColorTable
CreatePalette
CreateCompatibleDC
SelectObject
BitBlt
StretchBlt
GetObjectA
GetStockObject
CreateSolidBrush
DeleteObject
Rectangle
CreateFontA
comdlg32
ChooseFontA
GetFileTitleA
ChooseColorA
CommDlgExtendedError
GetSaveFileNameA
GetOpenFileNameA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
shell32
DragQueryPoint
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetMalloc
DragAcceptFiles
ShellExecuteA
DragQueryFileA
comctl32
ImageList_AddMasked
ImageList_Create
ImageList_Destroy
ord17
ImageList_DragMove
ImageList_DragShowNolock
ImageList_DragLeave
ImageList_EndDrag
ImageList_GetImageInfo
ImageList_BeginDrag
ImageList_DragEnter
_TrackMouseEvent
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 224KB - Virtual size: 222KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 511KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ