Static task
static1
Behavioral task
behavioral1
Sample
816780ee6a02b7195fef2bd99f51072c_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
816780ee6a02b7195fef2bd99f51072c_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
816780ee6a02b7195fef2bd99f51072c_JaffaCakes118
-
Size
49KB
-
MD5
816780ee6a02b7195fef2bd99f51072c
-
SHA1
aaf4cda1ad4915944cf82a0338a2a9c074e09f2f
-
SHA256
ca0f80d45e5a398d8a3adb06701abd8bc374957a502b4b743c178681a6e69c41
-
SHA512
216c3a5096777c8012f2cdaa98cdb7640ee64dfb5b5a92d20a06f27344332180da694c0f0d1e8bc06cb30ecc5c1d81ebb778d841a258f07d985979291f902954
-
SSDEEP
1536:lYS0OPbJ2PrbxpzQ5B+IvcemrNTMwkuxJu55G:23O92PM5B+IvzSAwkuxI55G
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 816780ee6a02b7195fef2bd99f51072c_JaffaCakes118
Files
-
816780ee6a02b7195fef2bd99f51072c_JaffaCakes118.exe windows:4 windows x86 arch:x86
a4bbc54e5279689590ad82136b7f6deb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
CheckRadioButton
GetWindowThreadProcessId
SetClassLongW
DestroyWindow
LoadAcceleratorsA
NotifyWinEvent
IsWindowUnicode
GetSubMenu
DrawTextW
PostMessageA
SetRectEmpty
MonitorFromRect
SetWindowTextA
IsWindowEnabled
GetWindowTextW
SetWindowLongW
InsertMenuItemA
DestroyAcceleratorTable
GetForegroundWindow
CheckMenuRadioItem
AdjustWindowRectEx
SendMessageW
GetDlgCtrlID
InsertMenuItemW
OffsetRect
DeleteMenu
DefWindowProcW
GetMessageW
SetMenuInfo
GetClientRect
CallWindowProcW
ReleaseCapture
SetPropA
GetPropW
InvalidateRgn
SetDlgItemInt
SetPropW
SetMenu
CreateWindowExW
GetDlgItemTextW
RegisterWindowMessageW
GetWindowDC
MessageBeep
CopyAcceleratorTableW
UnregisterClassA
MapWindowPoints
UnhookWindowsHookEx
MonitorFromPoint
GetClassInfoExW
GetNextDlgTabItem
RegisterClassExA
BringWindowToTop
SetScrollPos
CharUpperBuffW
SetWindowRgn
LoadMenuW
GetWindowRect
ClientToScreen
TranslateAcceleratorA
ClipCursor
CloseWindow
SetCapture
InsertMenuA
SetMenuItemInfoA
SetWindowPlacement
CreateMenu
GetDlgItemTextA
IsDialogMessageA
UpdateWindow
SetForegroundWindow
DestroyCursor
CreateDialogParamA
GetActiveWindow
DrawEdge
MonitorFromWindow
GetUpdateRect
LoadIconA
GetKeyState
IntersectRect
EndDialog
IsIconic
LoadMenuA
WinHelpA
CallWindowProcA
GetQueueStatus
GetMessageA
UnregisterClassW
PostQuitMessage
WindowFromDC
RegisterClassA
PtInRect
DefWindowProcA
TrackPopupMenu
SetCursor
IsWindow
FindWindowExA
MsgWaitForMultipleObjects
KillTimer
CharNextW
RemoveMenu
CallNextHookEx
SendMessageTimeoutA
RegisterWindowMessageA
SetWindowPos
ShowWindow
IsRectEmpty
ReleaseDC
CreatePopupMenu
GetDialogBaseUnits
PeekMessageA
RegisterClassW
EnumChildWindows
CheckMenuItem
GetMonitorInfoW
IsDialogMessageW
DialogBoxParamW
ScrollWindowEx
SetRect
LoadCursorA
IsWindowVisible
LoadImageW
SetDlgItemTextW
GetAsyncKeyState
LoadStringA
CopyImage
CopyIcon
IsDlgButtonChecked
GetParent
EnableWindow
SetFocus
DispatchMessageA
GetIconInfo
MoveWindow
LoadImageA
SetWindowTextW
GetTopWindow
GetScrollInfo
CharLowerW
ScreenToClient
DispatchMessageW
SetActiveWindow
SendDlgItemMessageW
SetTimer
LoadAcceleratorsW
WinHelpW
InvalidateRect
GetDlgItem
CreateDialogParamW
GetMenuStringW
AppendMenuA
DestroyMenu
SystemParametersInfoW
AppendMenuW
CharNextA
VkKeyScanW
IsMenu
GetWindowRgn
DrawTextA
GetMenuItemID
EnableMenuItem
InflateRect
GetWindowLongW
DrawFocusRect
GetClassLongW
LoadStringW
FillRect
TrackPopupMenuEx
GetMenuStringA
GetDesktopWindow
GetMonitorInfoA
GetFocus
GetWindowTextA
SetMenuItemInfoW
CopyRect
GetDoubleClickTime
wsprintfW
GetClassInfoW
BeginPaint
GetWindow
PeekMessageW
GetClassNameA
ModifyMenuW
SetDlgItemTextA
RedrawWindow
CreateWindowExA
WaitMessage
FindWindowA
SetClassLongA
SetScrollInfo
RegisterClipboardFormatA
FrameRect
DestroyIcon
CheckDlgButton
GetClassInfoExA
EqualRect
UnionRect
GetWindowLongA
LoadIconW
GetMenuItemInfoA
GetClassLongA
DrawAnimatedRects
TranslateMessage
GetMessagePos
wvsprintfW
VkKeyScanA
GetCapture
SetWindowsHookExA
GetSysColor
SendMessageA
EnumWindows
GetClassNameW
GetCursorPos
GetAncestor
ModifyMenuA
InsertMenuW
GetWindowPlacement
FindWindowExW
GetMessageTime
GetSysColorBrush
SendMessageTimeoutW
FindWindowW
PostThreadMessageW
DrawIconEx
GetDC
SetWindowsHookExW
EndPaint
LoadCursorW
IsChild
RegisterClipboardFormatW
TranslateAcceleratorW
GetMenuItemInfoW
GetMenu
SetParent
GetSystemMetrics
MessageBoxW
PostMessageW
CopyAcceleratorTableA
GetWindowTextLengthA
DialogBoxParamA
GetPropA
ShowCursor
MessageBoxA
PostThreadMessageA
GetClassInfoA
SetWindowLongA
GetWindowTextLengthW
SystemParametersInfoA
RegisterClassExW
GetMenuItemCount
ValidateRect
advapi32
RegSetValueExW
RegDeleteKeyA
GetLengthSid
SetSecurityDescriptorOwner
RegSetValueW
RegEnumValueA
RegQueryInfoKeyA
RegDeleteValueA
RegEnumValueW
RegDeleteKeyW
SetSecurityDescriptorDacl
RegEnumKeyExA
RegQueryInfoKeyW
RegCloseKey
InitializeAcl
AllocateAndInitializeSid
SetSecurityDescriptorGroup
CryptAcquireContextW
RegEnumKeyExW
OpenProcessToken
RegQueryValueExA
RegCreateKeyExA
DuplicateTokenEx
RegCreateKeyA
RegSetValueExA
RegCreateKeyExW
AccessCheck
RegOpenKeyExW
RegDeleteValueW
LogonUserW
RegOpenKeyExA
OpenThreadToken
CryptGenRandom
RegCreateKeyW
InitializeSecurityDescriptor
RegSetValueA
FreeSid
RegNotifyChangeKeyValue
SetFileSecurityW
RegQueryValueExW
GetFileSecurityW
AddAccessAllowedAce
kernel32
WaitForMultipleObjects
GetLocalTime
ExpandEnvironmentStringsW
FreeResource
LCMapStringA
GetTimeFormatA
QueryDosDeviceA
EnterCriticalSection
lstrcmpiW
SetEndOfFile
GetThreadPriority
GetDateFormatA
GlobalAddAtomA
GetFileSize
CompareFileTime
lstrcpynW
CreateEventW
GlobalAddAtomW
WideCharToMultiByte
DeleteFileW
GetDateFormatW
GetCurrentProcessId
GetSystemTime
SetFileAttributesW
IsBadReadPtr
GetVersionExA
GetLongPathNameA
GetSystemPowerStatus
GetDiskFreeSpaceA
HeapDestroy
WritePrivateProfileStringW
QueryPerformanceCounter
GetWindowsDirectoryA
SetUnhandledExceptionFilter
OpenEventA
LeaveCriticalSection
FindResourceW
LockResource
GlobalDeleteAtom
CreateMutexW
GetSystemDirectoryA
GetTempFileNameW
lstrcmpA
FormatMessageA
GlobalFree
CompareStringA
GetCurrentDirectoryW
SetThreadPriority
GetLogicalDriveStringsW
ReleaseMutex
GetModuleFileNameA
GetDriveTypeA
FileTimeToLocalFileTime
InterlockedDecrement
DeviceIoControl
CreateFileW
FindResourceExW
CreateDirectoryA
OpenProcess
LoadLibraryW
SetFileAttributesA
InterlockedExchange
FindClose
GetFileAttributesA
GetNumberFormatA
CreateDirectoryW
GetProfileStringA
GetTimeFormatW
GetNumberFormatW
GetLongPathNameW
GetFileAttributesExW
FindResourceExA
FindNextChangeNotification
SetFilePointer
GetUserDefaultLCID
CreateFileA
GetTempFileNameA
UnmapViewOfFile
CreateThread
FormatMessageW
GetFileTime
FreeEnvironmentStringsW
FileTimeToSystemTime
GetExitCodeThread
CompareStringW
GetSystemTimeAsFileTime
CreateFileMappingW
GetSystemInfo
LCMapStringW
FindNextFileW
lstrlenA
SetEvent
SizeofResource
RemoveDirectoryW
MapViewOfFile
MulDiv
CreateMutexA
GetFullPathNameW
GetCurrentDirectoryA
CreateEventA
QueryDosDeviceW
SetLastError
FreeEnvironmentStringsA
ReadDirectoryChangesW
FindCloseChangeNotification
GetLastError
WriteFile
SetErrorMode
ResetEvent
OutputDebugStringW
GetSystemDefaultLCID
GetLogicalDriveStringsA
lstrcmpiA
GlobalLock
GetCurrentProcess
EnumResourceNamesA
DuplicateHandle
GetFileAttributesW
IsValidLocale
GetFileType
RemoveDirectoryA
LoadResource
WritePrivateProfileStringA
FlushInstructionCache
lstrcmpW
GetWindowsDirectoryW
lstrcpynA
FindResourceA
CreateFileMappingA
CloseHandle
FindFirstFileA
lstrcatW
WriteProfileStringW
GetVolumeInformationA
FreeLibrary
ReadFile
OpenEventW
GetShortPathNameA
GetFullPathNameA
MultiByteToWideChar
OutputDebugStringA
InitializeCriticalSection
GetShortPathNameW
GetPrivateProfileStringW
GetProfileStringW
RaiseException
FindAtomW
FindFirstChangeNotificationW
FlushFileBuffers
GetDriveTypeW
InterlockedIncrement
LocalAlloc
GetTimeZoneInformation
DeleteCriticalSection
VirtualFree
GetVersionExW
GetLocaleInfoA
SystemTimeToFileTime
FreeLibraryAndExitThread
GetModuleHandleW
GlobalSize
GetLocaleInfoW
WaitForSingleObject
ExpandEnvironmentStringsA
GlobalAlloc
IsBadWritePtr
EnumResourceNamesW
GetCurrentThread
WaitForSingleObjectEx
GetFileAttributesExA
GetEnvironmentStrings
GetPrivateProfileStringA
FindFirstFileW
GetTempPathA
ReleaseSemaphore
lstrcpyW
GlobalUnlock
GetExitCodeProcess
GetUserDefaultLangID
GetThreadLocale
GetSystemDirectoryW
LocalFree
GetProcessHeap
LoadLibraryExA
FindNextFileA
DeleteFileA
LocalFileTimeToFileTime
GetVersion
WriteProfileStringA
CopyFileExW
GetModuleFileNameW
HeapFree
HeapAlloc
GetVolumeInformationW
GlobalMemoryStatus
lstrlenW
msvcrt
_ultow
wcstod
wcstoul
??2@YAPAXI@Z
fprintf
wcschr
memset
atoi
localtime
strncmp
wcsstr
isspace
_wtoi64
free
wcsncpy
towupper
iswprint
wcstol
bsearch
_wcsnicmp
wcsrchr
_wcslwr
iswcntrl
iswalpha
fopen
iswspace
wcsncat
fflush
_beginthread
iswdigit
_wfopen
iswalnum
_mbslen
_beginthreadex
memcpy
_adjust_fdiv
strlen
tolower
realloc
fclose
floor
_strnicmp
__CxxFrameHandler
swprintf
_except_handler3
qsort
sscanf
wcslen
_initterm
wcsncmp
abort
sprintf
_itow
difftime
_memicmp
_ftol
_wtoi
clock
_vsnwprintf
srand
wcstok
fwrite
iswascii
__dllonexit
strchr
isxdigit
_iob
??3@YAXPAX@Z
_itoa
towlower
vswprintf
memcmp
strcpy
wcscpy
_stricmp
_vsnprintf
time
_wcsicoll
_endthread
_wcsicmp
swscanf
wcspbrk
abs
isdigit
wcsftime
_ltow
_onexit
ceil
malloc
getenv
wcsspn
wcscoll
_ui64tow
rand
wcscspn
toupper
wcscmp
wcstombs
_CIexp
_CIpow
_wcsupr
_snwprintf
_wtol
ldexp
_setjmp3
longjmp
memmove
gdi32
GetTextExtentPoint32W
CreateMetaFileW
RectVisible
GetObjectW
GetDIBits
CreateCompatibleBitmap
GetObjectType
ExtCreateRegion
SetRectRgn
CreatePen
CreateICA
CreateBrushIndirect
TextOutW
GetRgnBox
SetWindowOrgEx
PtInRegion
GetPaletteEntries
DeleteMetaFile
OffsetRgn
RestoreDC
CreateFontA
MoveToEx
StretchBlt
CreatePenIndirect
CreateCompatibleDC
SelectClipRgn
BitBlt
SetMapMode
CreateDCW
SetStretchBltMode
Rectangle
ExtTextOutW
GetLayout
GetTextExtentPoint32A
SetLayout
CreateMetaFileA
GetDIBColorTable
GetTextExtentPointW
GetStockObject
CreateFontIndirectA
CloseMetaFile
GetSystemPaletteEntries
SetDIBitsToDevice
LPtoDP
PatBlt
GetTextExtentPointA
DeleteObject
CreateFontW
SetBkMode
ExcludeClipRect
Polygon
GetObjectA
StretchDIBits
CreateICW
CreateRectRgnIndirect
GetTextMetricsA
CreateDIBSection
GetClipBox
SaveDC
OffsetWindowOrgEx
ExtSelectClipRgn
LineTo
DPtoLP
MaskBlt
CreateRectRgn
DeleteDC
SetPaletteEntries
CreateSolidBrush
SetWindowExtEx
CreateFontIndirectW
CreateDCA
CombineRgn
GetTextMetricsW
CreatePalette
SetBkColor
SelectPalette
SetROP2
SetTextColor
GetTextAlign
SetTextCharacterExtra
SetViewportOrgEx
GetBkColor
RealizePalette
SetTextAlign
SelectObject
OffsetViewportOrgEx
GetDeviceCaps
GetRegionData
IntersectClipRect
ole32
CoFreeUnusedLibraries
GetRunningObjectTable
CoGetTreatAsClass
HWND_UserFree
OleRegEnumVerbs
HWND_UserMarshal
RevokeDragDrop
CoGetMalloc
OleRegGetMiscStatus
CoRevokeClassObject
GetHGlobalFromStream
CreateDataAdviseHolder
CoReleaseMarshalData
CreateStreamOnHGlobal
HMENU_UserMarshal
CoUninitialize
PropVariantCopy
CreateOleAdviseHolder
HBITMAP_UserUnmarshal
CoDisconnectObject
IsAccelerator
HBITMAP_UserMarshal
CoGetClassObject
CoInitializeEx
CoCreateInstance
WriteClassStm
CoMarshalInterThreadInterfaceInStream
CoCreateFreeThreadedMarshaler
StringFromCLSID
CoTaskMemRealloc
CoCreateGuid
HMENU_UserSize
ReleaseStgMedium
CoTaskMemFree
CoGetInterfaceAndReleaseStream
StringFromIID
CoUnmarshalInterface
OleSaveToStream
PropVariantClear
CoTaskMemAlloc
CoMarshalInterface
HWND_UserUnmarshal
HWND_UserSize
HMENU_UserFree
HBITMAP_UserFree
HMENU_UserUnmarshal
CoRegisterClassObject
HBITMAP_UserSize
CLSIDFromProgID
StringFromGUID2
RegisterDragDrop
OleRegGetUserType
CLSIDFromString
DoDragDrop
CoFileTimeNow
CoInitialize
OleLoadFromStream
rpcrt4
CStdStubBuffer_CountRefs
CStdStubBuffer_AddRef
NdrStubCall2
NdrDllUnregisterProxy
CStdStubBuffer_Invoke
CStdStubBuffer_Connect
NdrOleAllocate
IUnknown_AddRef_Proxy
IUnknown_Release_Proxy
NdrCStdStubBuffer_Release
NdrDllRegisterProxy
IUnknown_QueryInterface_Proxy
CStdStubBuffer_Disconnect
UuidCreate
NdrStubForwardingFunction
CStdStubBuffer_DebugServerRelease
NdrOleFree
CStdStubBuffer_IsIIDSupported
NdrClientCall2
NdrCStdStubBuffer2_Release
NdrDllCanUnloadNow
CStdStubBuffer_QueryInterface
CStdStubBuffer_DebugServerQueryInterface
comctl32
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_GetImageCount
PropertySheetA
CreatePropertySheetPageA
ImageList_Destroy
InitCommonControlsEx
CreatePropertySheetPageW
CreateStatusWindowW
ImageList_Draw
ImageList_LoadImageA
PropertySheetW
ImageList_AddMasked
ImageList_Add
ImageList_Remove
DestroyPropertySheetPage
ImageList_Create
ImageList_LoadImageW
_TrackMouseEvent
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoSizeW
GetFileVersionInfoA
VerQueryValueW
GetFileVersionInfoW
msvfw32
ICInstall
ICInfo
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ