Static task
static1
Behavioral task
behavioral1
Sample
950b71d118f49b21b94807c415000468_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
950b71d118f49b21b94807c415000468_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
950b71d118f49b21b94807c415000468_JaffaCakes118
-
Size
1.1MB
-
MD5
950b71d118f49b21b94807c415000468
-
SHA1
07319fa3b4d00f6d772b9c330d8c54810d1b3d2b
-
SHA256
10d94da2e87a9983ebefefc6e3ce21335c9abab19d627a8fb218f61728dfe18f
-
SHA512
97c7db88779a1bcad53c20b39ae51abd210b5f6b8a03f11cf14b9022ab4632a22ab9359e59290af8e4e23aca0649f8a800f62ef482192245bc1224ba4d9636f3
-
SSDEEP
24576:sdKFvs6JAdNaJ/gNgCJ/dCSVEl3spgDGATW2nHKNjQYlHwbdSfk2bdS8:sdKC6JMNaJq5/dCSVFCn8wEfFE8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 950b71d118f49b21b94807c415000468_JaffaCakes118
Files
-
950b71d118f49b21b94807c415000468_JaffaCakes118.exe windows:5 windows x86 arch:x86
f9bbd46b49bde109887d30788c2e4505
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
uxtheme
CloseThemeData
OpenThemeData
DrawThemeBackground
psapi
EnumProcessModules
EnumProcesses
GetModuleFileNameExW
kernel32
lstrcmpiW
SetLastError
FreeLibrary
MultiByteToWideChar
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
LoadLibraryW
CopyFileW
CreateFileA
CreateFileW
CloseHandle
WriteFile
ReadFile
SetFilePointer
GetFileSize
FlushFileBuffers
SystemTimeToFileTime
LocalFileTimeToFileTime
CreateDirectoryW
GetFileAttributesW
GetCurrentDirectoryW
SetFileTime
GetFullPathNameW
InterlockedExchange
GetTempFileNameW
GetTickCount
GetTempPathW
OpenProcess
Sleep
RemoveDirectoryW
DeleteFileW
SetFileAttributesW
GetModuleHandleA
ExitProcess
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
GetStringTypeW
GetCPInfo
LCMapStringW
LCMapStringA
GetStartupInfoW
CreateThread
ExitThread
VirtualQuery
GetSystemInfo
VirtualProtect
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetProcAddress
InterlockedCompareExchange
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetOEMCP
IsValidCodePage
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetCurrentProcessId
InterlockedDecrement
InterlockedIncrement
GetLastError
lstrlenW
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
WideCharToMultiByte
GetSystemTimeAsFileTime
GetLocaleInfoA
GetStringTypeA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
InitializeCriticalSectionAndSpinCount
GetACP
user32
EndDialog
SetFocus
GetCursorPos
FillRect
DrawFrameControl
IsWindowEnabled
ScreenToClient
GetDlgCtrlID
UnregisterClassA
GetDesktopWindow
InvalidateRect
wsprintfA
wsprintfW
GetSystemMetrics
LoadImageW
EndPaint
BeginPaint
PostQuitMessage
GetParent
GetWindow
GetWindowRect
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
IsDialogMessageW
SendMessageW
GetDlgItem
EnableWindow
IsWindowVisible
GetClientRect
SetWindowPos
SetWindowTextW
GetWindowLongW
DefWindowProcW
GetActiveWindow
MessageBoxW
DialogBoxParamW
CreateDialogParamW
DestroyWindow
CharNextW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
ShowWindow
SetWindowLongW
SetDlgItemTextW
gdi32
StretchBlt
GetDIBColorTable
CreateDIBSection
GetObjectW
SetDIBColorTable
SelectObject
CreateCompatibleDC
DeleteObject
CreateSolidBrush
CreateFontW
DeleteDC
advapi32
RegEnumKeyExW
RegCloseKey
RegOpenKeyExW
RegSetValueExW
RegDeleteKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegCreateKeyExW
RegDeleteValueW
shell32
ord165
SHGetFolderPathW
ShellExecuteW
ole32
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CoInitializeEx
CreateStreamOnHGlobal
CoUninitialize
oleaut32
VarUI4FromStr
shlwapi
StrToIntW
PathAddBackslashW
PathFindExtensionW
StrCmpIW
PathAppendW
PathCombineW
PathRemoveFileSpecW
comctl32
ImageList_Add
ImageList_Create
InitCommonControlsEx
msimg32
TransparentBlt
AlphaBlend
gdiplus
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImageGraphicsContext
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI
GdipCloneImage
GdipGetImagePalette
Sections
.text Size: 186KB - Virtual size: 185KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ