Static task
static1
Behavioral task
behavioral1
Sample
43d895968256c8f74db6f18a42baade7_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
43d895968256c8f74db6f18a42baade7_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
43d895968256c8f74db6f18a42baade7_JaffaCakes118
-
Size
754KB
-
MD5
43d895968256c8f74db6f18a42baade7
-
SHA1
194b8558963cc774c8267ca9d01b9e09e317ec0a
-
SHA256
b487fe8e47700d12c942141d1c0776e8e2521640717b062bc434702d72ad92b4
-
SHA512
02e46209c349ff6844b3b8124347751de8dd34edacccb23746b373dcdfa80ceeeee6a622540dea00ce02bddc2b5bb4aa6993cabf77e1f4cce0c82695f447f0bc
-
SSDEEP
12288:5ttUtThYwSVUMByWUtEM14sSSx0ZREBU0UXlS5MiyQcY88whlrTauDw9fno:5AlSxByWO4sStZR13SjyUIrTVf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 43d895968256c8f74db6f18a42baade7_JaffaCakes118
Files
-
43d895968256c8f74db6f18a42baade7_JaffaCakes118.exe windows:5 windows x86 arch:x86
c7d613589e89871eb60c934a8c9a69d1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
HeapCreate
GetStartupInfoW
HeapSetInformation
GetCommandLineA
GetSystemTimeAsFileTime
TerminateProcess
EnterCriticalSection
TlsFree
ExitProcess
GetModuleHandleW
GetModuleFileNameW
GetStdHandle
GetFileType
WriteConsoleW
RtlUnwind
EncodePointer
DecodePointer
HeapSize
HeapReAlloc
HeapAlloc
HeapFree
GetCurrentProcess
GetLocaleInfoW
LoadLibraryW
Sleep
SetLastError
LCMapStringW
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RaiseException
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetHandleCount
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetTimeZoneInformation
VirtualQuery
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetStdHandle
CreateFileW
SetEndOfFile
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
SystemTimeToFileTime
LoadLibraryExA
FreeLibrary
SetConsoleTitleA
GetThreadContext
LoadLibraryA
GetProcAddress
CreateEventA
GetConsoleWindow
EnumSystemLanguageGroupsA
SetFilePointer
GetProfileStringA
GlobalFree
FileTimeToSystemTime
CreateThread
GetExitCodeThread
WaitForSingleObject
MoveFileA
GetDriveTypeA
FindFirstFileA
FindNextFileA
FindClose
CreateMutexA
GetCurrentThreadId
GlobalGetAtomNameA
DeleteFileA
RemoveDirectoryA
GetFileAttributesA
GetLastError
CompareFileTime
GetFileSize
GetFileTime
CopyFileA
GlobalAddAtomA
GlobalDeleteAtom
GetSystemDirectoryA
GetVersionExA
FindResourceA
SizeofResource
LoadResource
LockResource
WritePrivateProfileStringA
MoveFileExA
GetLocalTime
GetModuleFileNameA
CreateDirectoryA
lstrcmpA
lstrcmpiA
WriteFile
lstrlenA
CreateFileA
ReadFile
CloseHandle
GlobalAlloc
GlobalLock
lstrcatA
GlobalUnlock
IsDBCSLeadByte
WideCharToMultiByte
MultiByteToWideChar
GetTickCount
GetModuleHandleA
lstrcpyA
lstrcpynA
LeaveCriticalSection
InitializeCriticalSection
user32
OffsetRect
ExitWindowsEx
GetMenuItemCount
GetMenuItemInfoA
ModifyMenuA
DeleteMenu
InflateRect
GetWindowTextLengthA
LoadImageA
RegisterClassExA
GetMessageA
IsDialogMessageA
TranslateMDISysAccel
InsertMenuA
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
IsIconic
GetMenu
SetWindowsHookExA
IntersectRect
IsRectEmpty
GetForegroundWindow
SetPropA
CallNextHookEx
IsZoomed
RedrawWindow
MessageBeep
SetWindowPos
GetPropA
CallWindowProcA
RemovePropA
SetWindowTextA
CharLowerA
FindWindowA
MonitorFromWindow
CreateAcceleratorTableA
SendInput
DialogBoxIndirectParamA
WaitForInputIdle
UnionRect
GetSystemMenu
MapWindowPoints
TranslateAcceleratorA
LoadAcceleratorsA
IsCharLowerA
wsprintfA
DestroyWindow
IsWindow
CreateWindowExA
MoveWindow
LoadStringA
GetWindowPlacement
SetWindowPlacement
CopyRect
SetForegroundWindow
CreateDialogParamA
ShowWindow
PeekMessageA
TranslateMessage
DispatchMessageA
CheckMenuItem
CheckMenuRadioItem
UnhookWindowsHookEx
GetWindowTextA
GetSysColorBrush
SetDlgItemInt
GetDlgItemInt
CheckRadioButton
CheckDlgButton
LoadBitmapA
GetWindow
EqualRect
GetClientRect
EndPaint
FillRect
IsDlgButtonChecked
LoadMenuA
GetSubMenu
DialogBoxParamA
UpdateWindow
LockWindowUpdate
SendDlgItemMessageA
EndDialog
SetRect
FindWindowExA
CreateIcon
CharUpperA
GetMonitorInfoA
GetSysColor
BeginPaint
DefWindowProcA
SetCursor
LoadCursorA
PtInRect
ScreenToClient
GetCursorPos
SendMessageA
GetParent
CreateCursor
DestroyCursor
GetWindowLongA
ReleaseDC
GetDC
SetWindowLongA
MessageBoxA
GetDlgItemTextA
GetDlgItem
SetFocus
RegisterClipboardFormatA
IsCharUpperA
RegisterClassA
LoadIconA
SetCapture
GetWindowRect
SetDlgItemTextA
ShowCursor
SetCursorPos
HideCaret
PostMessageA
DrawFocusRect
EnableWindow
EnableScrollBar
SystemParametersInfoA
GetClipboardData
CreatePopupMenu
AppendMenuA
IsClipboardFormatAvailable
EnableMenuItem
ClientToScreen
TrackPopupMenu
DestroyMenu
GetScrollInfo
ScrollWindow
DestroyCaret
DrawFrameControl
GetCaretPos
CreateCaret
ShowCaret
IsWindowEnabled
SetCaretPos
SetScrollPos
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetFocus
SetScrollInfo
SetTimer
KillTimer
GetSystemMetrics
GetKeyState
ReleaseCapture
InvalidateRect
gdi32
EnumFontFamiliesA
Ellipse
GetTextAlign
EndDoc
EndPage
StartPage
StartDocA
SetAbortProc
CreateDCA
SelectClipRgn
GetDeviceCaps
SelectClipPath
EndPath
BeginPath
SetPixelFormat
SetMapMode
SetViewportExtEx
SetWindowExtEx
EnumFontFamiliesExA
CreateDIBitmap
GetObjectA
GetTextColor
GetBkColor
GetBkMode
ExtTextOutA
Rectangle
SetPixel
SetTextAlign
SetTextCharacterExtra
RoundRect
GetStockObject
Polygon
CreateFontIndirectA
SetBkMode
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteDC
DeleteObject
LineTo
MoveToEx
CreateSolidBrush
CreatePen
CreateFontA
PatBlt
CreatePatternBrush
CreateBitmap
GetTextExtentPoint32A
TextOutA
SetBkColor
SetTextColor
GetTextMetricsA
FrameRgn
CombineRgn
CreateRectRgnIndirect
PolyBezier
SelectObject
CreateRectRgn
comdlg32
GetSaveFileNameA
PrintDlgA
ChooseFontA
CommDlgExtendedError
ChooseColorA
GetOpenFileNameA
advapi32
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
RegOpenKeyExA
shell32
DragQueryFileA
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
SHBrowseForFolderA
SHFileOperationA
ShellExecuteA
SHChangeNotify
DragAcceptFiles
ole32
OleUninitialize
CoInitialize
CoUninitialize
CoCreateInstance
OleInitialize
oleaut32
SafeArraySetIID
OleTranslateColor
RevokeActiveObject
comctl32
ImageList_Merge
ImageList_LoadImageA
InitCommonControlsEx
ImageList_SetDragCursorImage
PropertySheetA
ImageList_BeginDrag
ImageList_ReplaceIcon
ImageList_DragShowNolock
CreateToolbarEx
ImageList_EndDrag
ImageList_Destroy
ImageList_DragMove
ImageList_Create
ImageList_DragEnter
ImageList_GetDragImage
ord6
ImageList_DragLeave
winmm
DefDriverProc
OpenDriver
imm32
ImmReleaseContext
ImmGetContext
ImmNotifyIME
ImmGetVirtualKey
ImmSetConversionStatus
ImmGetConversionStatus
ImmGetCompositionStringA
ws2_32
accept
shlwapi
SHDeleteKeyA
msimg32
GradientFill
wininet
InternetReadFile
InternetOpenA
InternetFindNextFileA
FtpFindFirstFileA
InternetQueryDataAvailable
InternetCloseHandle
FtpRenameFileA
InternetOpenUrlA
FtpDeleteFileA
FtpRemoveDirectoryA
FtpCreateDirectoryA
InternetWriteFile
FtpSetCurrentDirectoryA
FtpOpenFileA
InternetConnectA
avifil32
AVIStreamLength
AVIStreamStart
winscard
SCardGetProviderIdW
dbghelp
MiniDumpWriteDump
d2d1
ord1
dwrite
DWriteCreateFactory
Sections
.text Size: 400KB - Virtual size: 399KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 265KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ