Static task
static1
Behavioral task
behavioral1
Sample
0045bbde4a23768ad175848e1e3b8833_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0045bbde4a23768ad175848e1e3b8833_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0045bbde4a23768ad175848e1e3b8833_JaffaCakes118
-
Size
454KB
-
MD5
0045bbde4a23768ad175848e1e3b8833
-
SHA1
b38a4ea2da6293117098428ceb678873e1953b6c
-
SHA256
e909b99a0bc73d2155791440cf4abe35f6d9e077c3c9734507c267bd821dd5f0
-
SHA512
1990063527f98854f592934efe9e76dd610c4d20a7902c0c70a30232e16bf5cbefcfda5bc00ab9f0e454175e2365c5f8ff966d93e46f330b0e24f7ee38e76e80
-
SSDEEP
12288:/8NexsO3B0VZp+fgFeeISvW1rLrsRw3vXaUmWSna6lTefJBJcK8FrUUmQmZ8:k0sIYmqeeoaUmWgFQBJyHDL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0045bbde4a23768ad175848e1e3b8833_JaffaCakes118
Files
-
0045bbde4a23768ad175848e1e3b8833_JaffaCakes118.exe windows:4 windows x86 arch:x86
6b906146bfa085c769bbbd7eb3e7d2e3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
HeapReAlloc
HeapAlloc
HeapFree
VirtualAlloc
WriteProcessMemory
SetConsoleTitleA
EnumCalendarInfoExA
GetProfileStringA
GetPrivateProfileSectionNamesA
ExitThread
SetVolumeLabelA
ExpandEnvironmentStringsW
GetAtomNameW
GetPrivateProfileIntA
GetAtomNameA
WritePrivateProfileStructA
WriteFileGather
WriteConsoleOutputCharacterW
HeapValidate
FindFirstFileExA
WritePrivateProfileSectionW
VirtualProtect
IsValidCodePage
FindResourceW
EscapeCommFunction
ReadConsoleOutputAttribute
BeginUpdateResourceA
GetSystemTimeAdjustment
ResumeThread
GetLastError
SetLastError
GetProcessHeaps
GlobalMemoryStatus
CreateMailslotA
RtlMoveMemory
CreateToolhelp32Snapshot
GetProfileIntA
WriteProfileSectionA
SetConsoleWindowInfo
SetFileAttributesA
lstrcmpA
GetPrivateProfileSectionA
SignalObjectAndWait
GetShortPathNameW
TerminateThread
Sleep
GetCalendarInfoA
WriteFileEx
lstrcmpi
SetHandleCount
CreateTapePartition
TlsGetValue
GlobalAlloc
GlobalFlags
GetCommandLineA
ReadFile
CreateSemaphoreW
LoadLibraryW
GlobalCompact
GlobalUnfix
LockFile
Thread32First
CreateWaitableTimerW
WriteConsoleOutputAttribute
GlobalDeleteAtom
GetFullPathNameW
CreateDirectoryA
GetFileAttributesW
GetFileAttributesExW
EnumResourceTypesA
GetDateFormatA
GetTimeFormatW
GetNumberFormatA
CreateWaitableTimerA
SetEvent
GetFileSize
GetModuleHandleW
FillConsoleOutputAttribute
DefineDosDeviceW
GetThreadContext
EnumResourceLanguagesW
OpenSemaphoreW
LocalHandle
GetHandleInformation
SetConsoleActiveScreenBuffer
CompareFileTime
lstrlenW
CreateMailslotW
EnumCalendarInfoW
GetPrivateProfileStructA
CreateFileMappingA
LocalShrink
FreeResource
BeginUpdateResourceW
GetThreadSelectorEntry
FlushViewOfFile
FindNextFileA
GlobalHandle
DeleteCriticalSection
GetProcessVersion
WaitForDebugEvent
GetProcessTimes
GlobalSize
ReadFileScatter
LeaveCriticalSection
DeleteAtom
GetProcessPriorityBoost
GetNumberOfConsoleMouseButtons
GetDriveTypeW
ReadConsoleInputW
GetThreadTimes
EraseTape
GetLocalTime
WaitForSingleObject
SetEnvironmentVariableA
lstrcmpW
Heap32First
GetConsoleScreenBufferInfo
Process32Next
WideCharToMultiByte
DefineDosDeviceA
TryEnterCriticalSection
GetQueuedCompletionStatus
SetThreadIdealProcessor
ConvertDefaultLocale
GetUserDefaultLCID
EnumCalendarInfoExW
SetLocaleInfoA
SetThreadAffinityMask
FlushFileBuffers
lstrcatW
GetLargestConsoleWindowSize
ReadConsoleOutputW
GetProfileIntW
ReleaseMutex
RtlZeroMemory
SuspendThread
InterlockedIncrement
GetCurrentDirectoryW
EnumResourceLanguagesA
CloseHandle
Heap32ListFirst
GetProfileSectionA
GetStringTypeExA
SetFilePointer
WaitCommEvent
SetConsoleScreenBufferSize
lstrcmpiA
GetConsoleCP
CompareStringA
CreateRemoteThread
WaitNamedPipeW
GetConsoleCursorInfo
FormatMessageW
GetComputerNameW
DisableThreadLibraryCalls
LocalReAlloc
SetEndOfFile
GetTempPathW
GetCompressedFileSizeA
GlobalUnlock
MultiByteToWideChar
GetPrivateProfileStringW
CommConfigDialogA
FreeConsole
GetEnvironmentStrings
GetEnvironmentStringsW
GetUserDefaultLangID
FindResourceExA
GetTempFileNameW
FindClose
VirtualLock
CreateMutexA
VirtualAllocEx
MoveFileW
GetDiskFreeSpaceA
WriteFile
GetCurrentDirectoryA
FreeEnvironmentStringsW
GetExitCodeThread
GetTimeZoneInformation
WritePrivateProfileSectionA
GetWindowsDirectoryA
GetStringTypeExW
GetVolumeInformationA
GetNamedPipeHandleStateA
GetSystemDirectoryA
OpenFileMappingA
GetCompressedFileSizeW
SetThreadContext
SetFileTime
ReadConsoleInputA
GetThreadPriorityBoost
GlobalFindAtomW
OpenEventA
GetVersion
SystemTimeToFileTime
GetLogicalDriveStringsW
OpenMutexW
InterlockedExchangeAdd
GetConsoleOutputCP
lstrcatA
CopyFileA
FoldStringW
HeapDestroy
FreeEnvironmentStringsA
VirtualFreeEx
VirtualFree
DeviceIoControl
GetFileTime
Toolhelp32ReadProcessMemory
VirtualUnlock
WaitForMultipleObjectsEx
GetTempFileNameA
SetCurrentDirectoryA
FindFirstFileW
GetVolumeInformationW
SetConsoleCursorPosition
Module32Next
SleepEx
GetPrivateProfileSectionW
HeapWalk
WritePrivateProfileStringW
RtlFillMemory
ReadConsoleOutputA
EnumSystemLocalesA
EnumSystemLocalesW
EnumResourceTypesW
WriteConsoleOutputA
GetLogicalDriveStringsA
lstrcmp
EnumDateFormatsExA
GetTimeFormatA
GlobalLock
TransmitCommChar
GetNamedPipeHandleStateW
PeekConsoleInputW
FlushConsoleInputBuffer
SetComputerNameW
GlobalFix
SetComputerNameA
FillConsoleOutputCharacterA
InitializeCriticalSection
HeapUnlock
Heap32Next
LocalAlloc
SetThreadExecutionState
GetWriteWatch
TlsAlloc
GlobalReAlloc
Heap32ListNext
GetFileInformationByHandle
FormatMessageA
AddAtomA
DeleteFileA
EnumResourceNamesW
lstrcpynW
OpenMutexA
OpenFileMappingW
GlobalGetAtomNameW
GetProcessAffinityMask
user32
WINNLSGetIMEHotkey
CharToOemBuffW
CreateDialogParamA
LookupIconIdFromDirectory
GetUserObjectInformationW
wsprintfW
DispatchMessageA
GetMonitorInfoA
WindowFromDC
TranslateAccelerator
GetWindowRect
CloseWindow
SetSysColors
CharLowerW
DestroyIcon
CharToOemW
TranslateMessage
SetCursorPos
CopyIcon
SetMenuItemBitmaps
CascadeChildWindows
SetRectEmpty
CharLowerBuffA
ChangeDisplaySettingsExW
EnumDisplaySettingsExA
GetDesktopWindow
SetClipboardData
EnumDisplaySettingsW
MapWindowPoints
DdeAbandonTransaction
DialogBoxParamA
ModifyMenuW
EqualRect
ValidateRgn
SubtractRect
GetKeyNameTextA
TranslateAcceleratorW
SetWindowPlacement
GetClipboardFormatNameW
GetMenuDefaultItem
GetDlgItem
LoadMenuA
FreeDDElParam
EditWndProc
GetKeyboardLayout
SendIMEMessageExA
GetAltTabInfo
DeferWindowPos
GetActiveWindow
GetKeyboardLayoutNameA
GetMessageA
GetParent
LoadKeyboardLayoutW
ReplyMessage
GetUserObjectSecurity
FlashWindowEx
SetFocus
DrawFocusRect
EnumWindowStationsA
GrayStringA
IsCharLowerW
ShowWindowAsync
LockWindowUpdate
ScrollWindow
FindWindowA
InvalidateRgn
GetWindowTextA
ArrangeIconicWindows
GetCursorPos
GetMenuContextHelpId
GetPropA
SetWindowPos
WindowFromPoint
SetCaretBlinkTime
DlgDirListA
GetMenu
UnregisterClassW
GetClipboardData
ChildWindowFromPointEx
SendMessageW
CheckMenuItem
EnumDisplaySettingsA
EnumWindowStationsW
ClipCursor
EnumChildWindows
ImpersonateDdeClientWindow
CallNextHookEx
GetKeyboardLayoutNameW
IsCharAlphaNumericW
SetLastErrorEx
SetMenuItemInfoA
ScrollDC
SetMenuInfo
SetDeskWallpaper
DefDlgProcA
GetShellWindow
RegisterClassExW
GetKeyboardState
SetProcessWindowStation
FindWindowW
ShowWindow
SetShellWindow
OemToCharBuffA
CreateWindowStationA
DdeConnectList
GetMenuItemCount
CharNextExA
RealChildWindowFromPoint
GetWindowTextW
AnyPopup
ChildWindowFromPoint
HideCaret
ScreenToClient
IsCharAlphaNumericA
EnumDisplayDevicesA
DefDlgProcW
GetDlgCtrlID
DestroyMenu
CharUpperW
IsClipboardFormatAvailable
CallWindowProcW
IsCharAlphaW
LoadMenuW
LookupIconIdFromDirectoryEx
DefWindowProcA
TabbedTextOutA
CharUpperBuffW
GetCursor
GetInputState
ChangeClipboardChain
GetCaretBlinkTime
MapDialogRect
SetWindowsHookExW
RemovePropA
GetMenuInfo
GetMenuItemInfoW
GetInputDesktop
AdjustWindowRectEx
IsZoomed
GetUpdateRgn
DdePostAdvise
GetDCEx
DestroyWindow
DdeImpersonateClient
SetRect
GetClipboardViewer
FindWindowExA
GetPropW
SetCaretPos
ValidateRect
IsChild
GetKeyNameTextW
DialogBoxIndirectParamW
DlgDirListW
PostMessageA
RegisterClassW
GetTopWindow
ExcludeUpdateRgn
LoadAcceleratorsA
DdeQueryStringA
InternalGetWindowText
DestroyCaret
ToAsciiEx
SendMessageA
TabbedTextOutW
LoadCursorA
SetScrollInfo
RegisterClassA
SetPropW
EndDeferWindowPos
MapVirtualKeyW
CharNextA
SetWindowTextA
DefFrameProcA
OemKeyScan
DdeQueryNextServer
IsCharUpperA
ChangeDisplaySettingsExA
GetWindowContextHelpId
SetMessageQueue
GetClassWord
EndDialog
GetCapture
EnumDisplaySettingsExW
EnumWindows
CallMsgFilter
CloseWindowStation
GetKeyboardType
EmptyClipboard
EnumPropsExA
EnumDesktopsA
ReleaseCapture
PostMessageW
BroadcastSystemMessageW
CheckRadioButton
SetWindowsHookA
VkKeyScanExA
SetWindowsHookW
PostThreadMessageW
MessageBoxExA
IsWindowEnabled
DdeDisconnectList
CreateMenu
SystemParametersInfoW
PtInRect
DrawCaption
GetMenuItemRect
EnumThreadWindows
MsgWaitForMultipleObjects
DrawStateW
IsDialogMessage
GetDialogBaseUnits
ShowOwnedPopups
SetWindowLongW
GetWindowInfo
InsertMenuA
DrawTextExA
GetMenuBarInfo
SetScrollRange
CreateDialogIndirectParamA
OpenWindowStationA
SetUserObjectSecurity
CharToOemBuffA
DialogBoxParamW
SetWinEventHook
OpenWindowStationW
SetClassWord
DdeGetLastError
GetClipboardFormatNameA
CopyRect
SetActiveWindow
LoadStringA
GetMenuItemID
IsMenu
GetClassInfoA
DdeQueryStringW
GetClipCursor
DdeDisconnect
UpdateWindow
GetSystemMetrics
CopyImage
CharToOemA
GetNextDlgGroupItem
GetSysColorBrush
CreatePopupMenu
LoadImageA
SetTimer
EnumDisplayMonitors
SetMenuItemInfoW
GetScrollInfo
CharNextW
PaintDesktop
CreateCursor
SetWindowWord
DestroyCursor
DialogBoxIndirectParamA
GetComboBoxInfo
FillRect
MonitorFromPoint
OemToCharA
OemToCharBuffW
GetWindowModuleFileNameA
EnumDisplayDevicesW
TileWindows
ReuseDDElParam
GetAncestor
DrawFrame
ShowScrollBar
TrackMouseEvent
SendNotifyMessageW
MessageBoxA
CreateAcceleratorTableW
GetScrollPos
CreateWindowExA
TileChildWindows
GetScrollRange
CreateMDIWindowW
CharPrevA
IsCharAlphaA
InsertMenuW
DdeConnect
IsWindow
SetWindowTextW
MapVirtualKeyA
DrawTextW
DrawFrameControl
CharLowerA
wsprintfA
AppendMenuW
GrayStringW
IsDlgButtonChecked
GetDlgItemTextA
CharUpperBuffA
GetWindow
SetProcessDefaultLayout
MapVirtualKeyExA
LoadMenuIndirectW
InvalidateRect
RedrawWindow
GetWindowWord
RegisterClipboardFormatW
VkKeyScanA
SystemParametersInfoA
ShowCaret
SendInput
DlgDirSelectComboBoxExW
EnumDesktopsW
MessageBoxExW
RemovePropW
DlgDirListComboBoxA
GetDoubleClickTime
BringWindowToTop
AttachThreadInput
SetMessageExtraInfo
DrawEdge
ExitWindowsEx
GetWindowDC
ChangeMenuA
PackDDElParam
LoadBitmapA
SetClassLongA
RegisterWindowMessageW
DrawStateA
AppendMenuA
IsIconic
CreateWindowExW
TrackPopupMenuEx
GetWindowLongA
TranslateMDISysAccel
advapi32
RegQueryValueExA
CryptGetProvParam
RegEnumKeyExA
CryptReleaseContext
RegOpenKeyA
CryptSignHashW
CryptAcquireContextW
RegQueryValueA
RegConnectRegistryW
RegDeleteKeyA
RegReplaceKeyA
LogonUserA
GetUserNameW
CryptEnumProvidersW
LookupPrivilegeNameA
RegOpenKeyExW
CryptSetKeyParam
RevertToSelf
RegCreateKeyExA
RegQueryInfoKeyW
RegEnumValueW
CryptEncrypt
RegEnumKeyA
LookupPrivilegeDisplayNameW
RegQueryValueW
CryptSetProvParam
LookupAccountSidW
LogonUserW
RegQueryInfoKeyA
RegSetValueA
AbortSystemShutdownA
RegQueryMultipleValuesA
CryptGetHashParam
CryptHashData
CryptSetProviderExW
LookupPrivilegeNameW
CryptDecrypt
LookupPrivilegeValueA
RegEnumKeyExW
RegSaveKeyW
RegSetValueW
RegQueryMultipleValuesW
RegSetValueExA
RegSaveKeyA
CryptAcquireContextA
RegCreateKeyExW
CreateServiceW
CryptDestroyHash
CryptEnumProviderTypesW
RegNotifyChangeKeyValue
LookupPrivilegeDisplayNameA
CryptGetDefaultProviderA
RegReplaceKeyW
CryptGetKeyParam
CryptSetProviderW
CryptCreateHash
CryptImportKey
RegRestoreKeyW
CryptGetUserKey
ReportEventA
RegQueryValueExW
StartServiceW
CryptSetProviderExA
RegCreateKeyA
LookupAccountNameW
RegDeleteValueA
RegConnectRegistryA
CryptDestroyKey
ReportEventW
Sections
.text Size: 169KB - Virtual size: 168KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 262KB - Virtual size: 261KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ