Static task
static1
Behavioral task
behavioral1
Sample
533d84ada8814cbc0ef940f8e0a5fcb7_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
533d84ada8814cbc0ef940f8e0a5fcb7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
533d84ada8814cbc0ef940f8e0a5fcb7_JaffaCakes118
-
Size
364KB
-
MD5
533d84ada8814cbc0ef940f8e0a5fcb7
-
SHA1
e35293331e374f65f9213f7493391fe602c234ab
-
SHA256
ee6665a15dd66853b035405ce04f086add92820f8eea31c890ae583aba951590
-
SHA512
771f3eb24c042dc378daaa9ad651dfe5c928185bdedcbd3fbfe21c13fa32a8411bccc9eadb5ea0953a949910eefef8c84954d05fd78a68faa1e079f1b007397b
-
SSDEEP
6144:KVx8UvYdINFhAOioyF5vsLgEpUc8aPts/LVpsjc8TZEseHl5WSdIaFw:InNFh0lvOvAVpsjc4peHlPdIB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 533d84ada8814cbc0ef940f8e0a5fcb7_JaffaCakes118
Files
-
533d84ada8814cbc0ef940f8e0a5fcb7_JaffaCakes118.exe windows:5 windows x86 arch:x86
a1a895b87c0f89a9a04bc8ae810c89cf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetWindowLongA
IsWindowUnicode
CreateAcceleratorTableW
FindWindowW
ReleaseCapture
RegisterClassExW
CreateDialogIndirectParamW
GetCapture
DragDetect
AppendMenuW
RegisterWindowMessageW
ShowCursor
IsWindow
DestroyCursor
CreateCursor
ScrollWindow
SetScrollInfo
InsertMenuItemW
LoadStringW
SetMenuItemInfoW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageA
GetMessageW
EndDeferWindowPos
DeferWindowPos
DdeAccessData
GetMonitorInfoW
SetForegroundWindow
SetWindowPlacement
CheckMenuRadioItem
EnableMenuItem
CheckMenuItem
DestroyAcceleratorTable
GetSubMenu
GetMenuItemID
ModifyMenuW
DialogBoxIndirectParamW
DialogBoxParamW
RemoveMenu
LoadIconW
DestroyIcon
mouse_event
GetDesktopWindow
GetDCEx
WindowFromPoint
PtInRect
LockWindowUpdate
SetDlgItemInt
MapWindowPoints
GetKeyState
TrackPopupMenu
GetWindowTextW
MessageBoxA
SetCapture
GetActiveWindow
IsChild
GetDlgCtrlID
RedrawWindow
GetCursorPos
SetWindowsHookExW
UnhookWindowsHookEx
SetParent
SetWindowTextW
LoadBitmapW
CallNextHookEx
CreatePopupMenu
CreateMenu
InsertMenuW
DestroyMenu
CallWindowProcA
CharUpperW
CharLowerW
DrawIcon
EndDialog
DdeCreateDataHandle
DdeClientTransaction
DdeNameService
DdePostAdvise
DdeSetUserHandle
DdeQueryConvInfo
DdeDisconnect
DdeConnect
DdeUninitialize
DdeInitializeA
DialogBoxParamA
SetDlgItemTextA
wvsprintfA
BeginDeferWindowPos
GetScrollPos
ScreenToClient
GetDlgItemTextW
SetDlgItemTextW
GetDlgItemInt
CreateDialogParamW
DrawFocusRect
FillRect
FrameRect
SetWindowLongW
GetWindowLongW
GetSysColor
GetClassNameW
PostQuitMessage
LoadMenuW
InflateRect
ClientToScreen
CallWindowProcW
IsWindowVisible
GetWindowRect
ShowWindow
SetWindowPos
SetClipboardViewer
ChangeClipboardChain
SendDlgItemMessageW
IsClipboardFormatAvailable
OpenClipboard
GetClipboardData
RegisterClipboardFormatW
CloseClipboard
MessageBoxW
RegisterClassW
BeginPaint
EndPaint
GetFocus
PostMessageW
LoadCursorW
SetCursor
DestroyWindow
CreateCaret
DestroyCaret
GetSystemMetrics
GetWindowPlacement
CreateWindowExW
wsprintfA
GetScrollRange
UpdateWindow
DefWindowProcW
DrawFrameControl
GetMenu
ShowCaret
MessageBeep
DrawTextW
SetCaretPos
HideCaret
GetParent
ShowScrollBar
SetScrollRange
InvalidateRect
SetScrollPos
GetKeyboardState
ToAscii
wsprintfW
GetDC
DrawEdge
DrawTextExW
ReleaseDC
GetClientRect
MoveWindow
SetFocus
LoadImageW
DrawIconEx
GetDlgItem
SendMessageW
EnableWindow
SystemParametersInfoW
SetMenu
IsDialogMessageW
IsDialogMessageA
PeekMessageW
IsZoomed
DeleteMenu
RealChildWindowFromPoint
IsIconic
DrawMenuBar
GetMenuItemCount
GetMenuStringW
EmptyClipboard
SetClipboardData
GetMenuState
MonitorFromWindow
GetKeyboardType
LoadStringA
CharNextA
CreateWindowExA
WaitMessage
ValidateRect
UnregisterClassA
UnionRect
TranslateMDISysAccel
TabbedTextOutA
SystemParametersInfoA
ShowOwnedPopups
SetWindowRgn
SetWindowsHookExA
SetWindowTextA
SetTimer
SetRect
SetPropA
SetMenuItemInfoA
SetKeyboardState
SetClassLongA
SetActiveWindow
SendMessageA
SendDlgItemMessageA
ScrollWindowEx
RemovePropA
RegisterWindowMessageA
RegisterClipboardFormatA
RegisterClassA
PostMessageA
PeekMessageA
OffsetRect
OemToCharA
MsgWaitForMultipleObjects
MapVirtualKeyA
MapDialogRect
LookupIconIdFromDirectoryEx
LoadMenuIndirectA
LoadKeyboardLayoutA
LoadIconA
LoadCursorA
LoadBitmapA
KillTimer
IsWindowEnabled
IsRectEmpty
IsCharAlphaNumericA
IsCharAlphaA
IntersectRect
InsertMenuItemA
InsertMenuA
GetWindowThreadProcessId
GetWindowTextA
GetWindowLongA
GetWindowDC
GetUpdateRect
GetTopWindow
GetSystemMenu
GetSysColorBrush
GetScrollInfo
GetPropA
GetWindow
GetMessageTime
GetMessagePos
GetMenuStringA
GetMenuItemInfoA
GetLastActivePopup
GetKeyboardLayoutNameA
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyNameTextA
GetIconInfo
GetForegroundWindow
GetDoubleClickTime
GetCursor
GetClassNameA
GetClassLongA
GetClassInfoA
GetCaretPos
GetAsyncKeyState
FindWindowA
EqualRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EnableScrollBar
DrawTextA
DispatchMessageA
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreateIconFromResourceEx
CreateIcon
CreateDialogIndirectParamA
ChildWindowFromPoint
BringWindowToTop
CharLowerBuffA
CharLowerA
CharUpperBuffA
CharToOemA
AdjustWindowRectEx
ActivateKeyboardLayout
DdeCmpStringHandles
DdeFreeStringHandle
DdeQueryStringA
DdeCreateStringHandleA
DdeGetLastError
DdeFreeDataHandle
DdeUnaccessData
comdlg32
PrintDlgW
GetOpenFileNameW
ChooseColorW
GetSaveFileNameW
shell32
SHChangeNotify
SHGetDataFromIDListA
SHGetDesktopFolder
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetFileInfoA
ShellExecuteA
ShellExecuteExA
DragFinish
SHBrowseForFolderW
SHFileOperationA
Shell_NotifyIconW
SHGetPathFromIDListW
SHGetMalloc
SHGetFolderPathW
SHGetSpecialFolderLocation
ShellExecuteW
DragQueryPoint
DragQueryFileW
ole32
CLSIDFromString
CoCreateInstance
StringFromCLSID
CoTaskMemAlloc
CoTaskMemFree
OleInitialize
OleUninitialize
RegisterDragDrop
RevokeDragDrop
DoDragDrop
OleGetClipboard
ReleaseStgMedium
CoInitialize
CoUninitialize
advapi32
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyExA
RegEnumValueA
RegFlushKey
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegQueryInfoKeyW
IsTextUnicode
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW
RegCloseKey
RegEnumKeyA
gdi32
CreateRoundRectRgn
DeleteEnhMetaFile
ExcludeClipRect
ExtCreatePen
ExtTextOutA
GdiFlush
GetBitmapBits
GetBrushOrgEx
GetClipBox
GetCurrentPositionEx
GetDCOrgEx
GetDIBColorTable
GetDIBits
GetEnhMetaFileBits
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
GetNearestPaletteIndex
GetObjectA
GetObjectType
GetPaletteEntries
GetRgnBox
GetSystemPaletteEntries
GetTextExtentPoint32A
GetTextExtentPointA
GetTextMetricsA
GetWinMetaFileBits
GetWindowOrgEx
IntersectClipRect
MaskBlt
PlayEnhMetaFile
PolyPolyline
Polygon
Polyline
RealizePalette
RectVisible
AbortDoc
AddFontResourceA
CreateFontA
GetBkColor
GetCharABCWidthsFloatW
RoundRect
SelectClipRgn
SelectPalette
SetAbortProc
SetDIBColorTable
SetEnhMetaFileBits
SetMapMode
SetPixel
SetStretchBltMode
SetViewportExtEx
SetViewportOrgEx
SetWinMetaFileBits
SetWindowExtEx
StartDocA
StretchBlt
StretchDIBits
UnrealizeObject
SelectObject
DeleteDC
SetBkMode
DeleteObject
Rectangle
CreatePen
GetStockObject
SetROP2
GetROP2
GetTextExtentPoint32W
CreateSolidBrush
SetTextColor
GetPixel
CreateFontIndirectW
GetTextExtentPointW
GetDeviceCaps
DPtoLP
StartDocW
StartPage
SetTextAlign
ExtTextOutW
EndPage
EndDoc
EnumFontFamiliesExW
CreateBitmap
CreatePatternBrush
SetBrushOrgEx
PatBlt
OffsetWindowOrgEx
SetWindowOrgEx
SetBkColor
CreateCompatibleDC
GetObjectW
CreateCompatibleBitmap
BitBlt
CreateFontW
SaveDC
RestoreDC
MoveToEx
LineTo
CreateHatchBrush
GetTextMetricsW
PtInRegion
RemoveFontResourceA
SetPixelV
TextOutA
TextOutW
CombineRgn
CopyEnhMetaFileA
CreateBrushIndirect
CreateDCA
CreateDIBSection
CreateDIBitmap
CreateFontIndirectA
CreateHalftonePalette
CreateICA
CreatePalette
CreatePenIndirect
GetTextColor
CreateRectRgn
comctl32
ImageList_Destroy
ImageList_Add
ImageList_DragShowNolock
ImageList_DragMove
ImageList_GetImageCount
ImageList_Draw
ImageList_DragEnter
ImageList_GetImageInfo
_TrackMouseEvent
ImageList_ReplaceIcon
ImageList_Create
ImageList_AddMasked
ImageList_SetIconSize
InitCommonControlsEx
ImageList_EndDrag
ImageList_BeginDrag
netapi32
NetWkstaTransportAdd
shlwapi
PathStripPathW
PathRemoveExtensionW
PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathCompactPathExW
PathIsDirectoryW
PathMatchSpecW
PathRemoveFileSpecW
PathAppendW
PathAddExtensionW
PathIsRelativeW
kernel32
GlobalAddAtomA
GetWindowsDirectoryA
GetVersion
GetTempPathA
GetTempFileNameA
GetSystemInfo
GetSystemDefaultLCID
GetShortPathNameA
GetProfileStringA
GetLocalTime
GetFullPathNameA
GetFileSize
GetFileAttributesA
GetExitCodeThread
GetDiskFreeSpaceA
FreeResource
FormatMessageA
FlushViewOfFile
FindResourceA
FindNextFileA
FindNextChangeNotification
FindFirstChangeNotificationA
FindCloseChangeNotification
FileTimeToDosDateTime
EnumCalendarInfoA
DeleteFileA
GlobalAlloc
CreateProcessA
CreatePipe
CreateFileMappingA
CreateEventA
CreateDirectoryA
SetFilePointerEx
GetFileSizeEx
FindNextVolumeA
FindFirstVolumeA
GetCPInfoExA
GetLongPathNameA
ExpandEnvironmentStringsA
GetEnvironmentVariableA
lstrcmpiA
SetFileTime
CompareFileTime
SearchPathA
lstrcatA
CopyFileA
GetUserDefaultLangID
GetSystemDirectoryA
GetExitCodeProcess
WritePrivateProfileStringA
GetPrivateProfileStringA
OpenMutexA
GlobalDeleteAtom
GlobalFindAtomA
GlobalHandle
GlobalSize
LoadResource
LockResource
MapViewOfFile
MoveFileA
MoveFileExA
MulDiv
OpenSemaphoreA
ReleaseSemaphore
RemoveDirectoryA
ResetEvent
ResumeThread
SetErrorMode
SetEvent
SetFileAttributesA
SetThreadLocale
SetThreadPriority
SizeofResource
SystemTimeToFileTime
TerminateThread
UnmapViewOfFile
WaitForMultipleObjects
WaitForSingleObject
WinExec
lstrcmpA
lstrcpyA
CreateThread
ExitThread
FindClose
FindFirstFileA
GetThreadLocale
LoadLibraryExA
lstrcpynA
lstrlenA
SetCurrentDirectoryA
VirtualQuery
Sleep
GetACP
HeapSize
CompareStringW
CompareStringA
GetDriveTypeA
SetEndOfFile
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetEnvironmentVariableA
GetLocaleInfoW
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoA
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapReAlloc
VirtualAlloc
WideCharToMultiByte
MultiByteToWideChar
lstrcmpW
lstrcatW
GetModuleFileNameW
lstrlenW
lstrcpyW
DeleteFileW
lstrcmpiW
GetLongPathNameW
GetFullPathNameW
MoveFileW
SetFileAttributesW
GetFileAttributesW
GlobalUnlock
GlobalLock
GetLastError
GetCurrentThreadId
GetModuleHandleW
SetCurrentDirectoryW
GetCurrentDirectoryW
FreeLibrary
GlobalFree
CloseHandle
GetCurrentProcess
GetCurrentProcessId
CreateFileW
GetProcAddress
LoadLibraryW
LocalFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ReadFile
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
GetSystemTimeAsFileTime
GetModuleHandleA
ExitProcess
HeapFree
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeA
GetStringTypeW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetOEMCP
IsValidCodePage
GetTimeZoneInformation
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
GetCurrentDirectoryA
GetTimeFormatA
GetDateFormatA
WriteFile
GetModuleFileNameA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LocalUnlock
LoadLibraryA
HeapDestroy
HeapCreate
VirtualFree
GetCommandLineW
SetLastError
GetTempPathW
LocalAlloc
LocalLock
FindResourceW
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
CreateSemaphoreA
Sections
.text Size: 94KB - Virtual size: 93KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 350KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 209KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ