Static task
static1
Behavioral task
behavioral1
Sample
04c28a8df8c9814e1d82f368bedb1a59_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
04c28a8df8c9814e1d82f368bedb1a59_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
04c28a8df8c9814e1d82f368bedb1a59_JaffaCakes118
-
Size
399KB
-
MD5
04c28a8df8c9814e1d82f368bedb1a59
-
SHA1
893bd0983b40019c6a76a0f46c467e554e2cb5e4
-
SHA256
eb1a4e209aa57badc4dc5c010eb3bb13ccbd68ffef982946c767c6750fa26088
-
SHA512
f0c73ffb9f8920cf5febc125c8b1e6c1b4acfb0abbe9655db9fcf85791a156ac3ecf3d8290445be0412ba9230647ba7a81c945e1e64634ac22e1a22968529f22
-
SSDEEP
6144:ezmNJ/usIPNTtYARPM6eOsr9wXNUKptIKwfocLVx2jrxCNRKdl7KNs5UMtr8:NvbI04PMBxr9w+A6K0SeK/u0UO8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04c28a8df8c9814e1d82f368bedb1a59_JaffaCakes118
Files
-
04c28a8df8c9814e1d82f368bedb1a59_JaffaCakes118.exe windows:4 windows x86 arch:x86
f83c0a14d694d0164cb5485618ff1a83
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
LoadLibraryA
RtlUnwind
InterlockedExchange
VirtualQuery
HeapReAlloc
HeapAlloc
HeapFree
VirtualAlloc
CreateProcessW
SetWaitableTimer
TlsFree
LockResource
lstrcpynA
UpdateResourceA
lstrcatA
EnumDateFormatsA
lstrcpyn
FindCloseChangeNotification
DeleteAtom
GetShortPathNameW
GetTimeZoneInformation
ExpandEnvironmentStringsA
EnumCalendarInfoA
GetProfileStringA
DeleteFileW
FillConsoleOutputCharacterW
InterlockedDecrement
GlobalAlloc
CreateRemoteThread
CompareFileTime
LocalHandle
GetNumberFormatW
GetProcessPriorityBoost
GetTimeFormatA
BeginUpdateResourceW
TerminateThread
ConnectNamedPipe
EnumResourceTypesA
LocalReAlloc
ReadDirectoryChangesW
GetPrivateProfileStructW
CreateToolhelp32Snapshot
DisableThreadLibraryCalls
GetDriveTypeW
SetEvent
SetThreadContext
FileTimeToDosDateTime
GetStartupInfoW
LocalShrink
FindResourceA
LoadModule
SetEndOfFile
GetFileAttributesExW
DebugActiveProcess
GetCompressedFileSizeW
SetEnvironmentVariableA
SetFileAttributesW
DisconnectNamedPipe
GetPrivateProfileStringA
LocalFlags
SleepEx
SetSystemTimeAdjustment
FindClose
CreateConsoleScreenBuffer
GetFileInformationByHandle
EnumResourceTypesW
GetStringTypeExA
GetSystemTimeAdjustment
FindResourceExW
EnumCalendarInfoExW
HeapLock
OpenEventW
TryEnterCriticalSection
SetThreadLocale
Process32Next
GlobalGetAtomNameA
SetSystemTime
GetProfileSectionW
GlobalAddAtomA
WritePrivateProfileStructW
WriteConsoleA
lstrcmpiW
SetLastError
IsValidLocale
SetLocaleInfoW
TlsSetValue
CreateMailslotW
GetModuleFileNameW
GetConsoleMode
GetCalendarInfoA
CreateFileW
GlobalMemoryStatus
LoadLibraryExA
FreeLibraryAndExitThread
WaitNamedPipeA
SetThreadPriorityBoost
GetLogicalDrives
WritePrivateProfileStringW
VirtualFreeEx
OpenFileMappingA
Module32Next
PeekNamedPipe
GetVersionExA
VirtualFree
GetUserDefaultLangID
GetDateFormatW
SetThreadIdealProcessor
EnumTimeFormatsW
GlobalUnfix
GetNumberOfConsoleInputEvents
DeviceIoControl
UnlockFile
AddAtomA
CommConfigDialogA
GlobalGetAtomNameW
FileTimeToLocalFileTime
CreateFileMappingW
UnhandledExceptionFilter
GlobalFlags
WaitForMultipleObjects
ReadConsoleOutputCharacterA
WaitNamedPipeW
SetConsoleWindowInfo
GlobalFindAtomW
SetConsoleCursorInfo
RtlFillMemory
FreeConsole
GetPrivateProfileSectionNamesW
WritePrivateProfileSectionA
CreateDirectoryW
WaitForMultipleObjectsEx
GetSystemDirectoryA
WaitCommEvent
GetConsoleTitleA
AddAtomW
OutputDebugStringW
EnumCalendarInfoExA
lstrcpyA
SetLocalTime
ReadConsoleOutputW
HeapCompact
GetStartupInfoA
FindAtomA
OpenMutexA
GetCurrencyFormatW
GetCalendarInfoW
EscapeCommFunction
BeginUpdateResourceA
GetShortPathNameA
LoadResource
SetFileAttributesA
CreateWaitableTimerW
SetConsoleCtrlHandler
SetConsoleOutputCP
OpenWaitableTimerW
GetCurrencyFormatA
GetComputerNameW
GetNamedPipeHandleStateA
GetThreadSelectorEntry
WriteProfileStringA
GetMailslotInfo
Heap32ListNext
CreateFileA
EnumResourceNamesA
GetDriveTypeA
GetExitCodeThread
lstrcpynW
EnumDateFormatsW
GetStringTypeW
OutputDebugStringA
UpdateResourceW
RemoveDirectoryW
TlsGetValue
FreeEnvironmentStringsA
LoadLibraryExW
lstrlenW
SetCurrentDirectoryA
SetEnvironmentVariableW
GetDiskFreeSpaceA
InitializeCriticalSection
SetLocaleInfoA
GetConsoleCP
SetConsoleMode
SetConsoleCursorPosition
VirtualProtect
CreateDirectoryExW
GetStringTypeA
GetWriteWatch
GetPrivateProfileIntA
GetACP
UnlockFileEx
ReadConsoleInputA
GetHandleInformation
ReadFileEx
GetProfileIntW
CloseHandle
FormatMessageA
SetConsoleActiveScreenBuffer
CreateTapePartition
GetDiskFreeSpaceExA
SuspendThread
WriteFile
ContinueDebugEvent
SetFileTime
GetEnvironmentVariableA
WritePrivateProfileStringA
GetProcessHeap
FindFirstFileExW
GetAtomNameW
lstrcatW
GetTimeFormatW
WriteFileEx
GetModuleHandleW
VirtualQueryEx
GetTempPathW
SetVolumeLabelW
CreateSemaphoreW
ReadFileScatter
EnumTimeFormatsA
IsDebuggerPresent
GetAtomNameA
LocalSize
GetNamedPipeHandleStateW
MulDiv
GetFileSize
ReleaseSemaphore
WaitForSingleObjectEx
SetConsoleTextAttribute
GetCompressedFileSizeA
GetFileTime
VirtualAllocEx
Sleep
SearchPathA
lstrlen
WideCharToMultiByte
MultiByteToWideChar
GetProcessShutdownParameters
GetPrivateProfileStringW
InterlockedIncrement
GetExitCodeProcess
lstrcpyW
SetCriticalSectionSpinCount
WriteConsoleInputW
OpenSemaphoreA
DuplicateHandle
Module32First
GetPrivateProfileSectionNamesA
ResumeThread
lstrcmpiA
SetFilePointer
GlobalFix
SetHandleCount
GetLogicalDriveStringsA
GetLastError
FlushInstructionCache
EnumSystemLocalesW
SetConsoleCP
GlobalReAlloc
FindNextFileA
lstrlenA
GetFullPathNameA
SetPriorityClass
GetLocaleInfoA
FindResourceExA
GetVolumeInformationW
GetProfileStringW
GetFileAttributesExA
HeapCreate
Thread32First
IsValidCodePage
VirtualUnlock
FindFirstChangeNotificationW
FindResourceW
EnumDateFormatsExW
FormatMessageW
EnumResourceLanguagesA
EnumResourceLanguagesW
CreateProcessA
ReadProcessMemory
EnumSystemCodePagesW
GlobalCompact
LocalAlloc
GetPrivateProfileSectionA
LockFile
WriteProcessMemory
Heap32Next
DefineDosDeviceW
GetFileType
RemoveDirectoryA
ResetEvent
GetEnvironmentStringsW
GetProcAddress
RtlMoveMemory
GetPriorityClass
WriteConsoleOutputCharacterW
GlobalUnWire
Toolhelp32ReadProcessMemory
GetWindowsDirectoryA
ExpandEnvironmentStringsW
MoveFileExA
ReadConsoleW
GetLogicalDriveStringsW
GetEnvironmentStrings
LocalLock
PeekConsoleInputW
GetEnvironmentStringsA
WinExec
SetConsoleTitleA
GetSystemDefaultLangID
GetTempFileNameA
InitializeCriticalSectionAndSpinCount
WriteConsoleOutputW
GlobalLock
WritePrivateProfileStructA
GetLargestConsoleWindowSize
CreateThread
GetNumberFormatA
OpenFile
WriteProfileStringW
SetComputerNameA
SetThreadPriority
DebugBreak
GetVersionExW
GetSystemPowerStatus
InitAtomTable
CreateWaitableTimerA
EnumCalendarInfoW
SetConsoleScreenBufferSize
lstrcmp
ResetWriteWatch
WriteConsoleOutputA
WriteConsoleOutputCharacterA
ReadConsoleA
FlushConsoleInputBuffer
GetCurrentDirectoryA
CompareStringA
CreateSemaphoreA
CreatePipe
HeapWalk
ReadConsoleOutputCharacterW
GetComputerNameA
LockFileEx
FillConsoleOutputAttribute
HeapUnlock
LocalFileTimeToFileTime
WriteFileGather
FlushFileBuffers
GetProcessHeaps
LocalUnlock
GetSystemDefaultLCID
EnterCriticalSection
GetSystemDirectoryW
CreateMutexW
FindAtomW
HeapDestroy
OpenEventA
InterlockedExchangeAdd
GlobalFindAtomA
GetThreadTimes
EraseTape
LocalFree
wininet
InternetCheckConnectionA
InternetOpenUrlA
DeleteUrlCacheContainerW
GetUrlCacheEntryInfoA
FtpSetCurrentDirectoryA
GopherOpenFileA
CreateUrlCacheContainerA
GetUrlCacheEntryInfoW
GetUrlCacheGroupAttributeA
InternetSetCookieA
InternetConnectW
CreateUrlCacheEntryA
InternetShowSecurityInfoByURLW
InternetSetDialState
IsHostInProxyBypassList
FindNextUrlCacheEntryExW
SetUrlCacheEntryGroup
GopherGetLocatorTypeW
InternetTimeFromSystemTimeA
InternetCanonicalizeUrlA
IncrementUrlCacheHeaderData
HttpOpenRequestA
InternetSetDialStateW
InternetWriteFile
SetUrlCacheHeaderData
InternetConfirmZoneCrossingA
InternetCrackUrlA
InternetCreateUrlA
HttpSendRequestA
InternetFortezzaCommand
HttpEndRequestA
GetUrlCacheConfigInfoA
SetUrlCacheEntryInfoA
SetUrlCacheEntryGroupA
InternetWriteFileExW
CommitUrlCacheEntryW
InternetTimeFromSystemTime
FtpRenameFileA
IsUrlCacheEntryExpiredA
FtpGetFileEx
DeleteUrlCacheEntryW
InternetTimeToSystemTimeA
FindFirstUrlCacheContainerW
FindFirstUrlCacheEntryW
InternetTimeToSystemTimeW
IsUrlCacheEntryExpiredW
InternetReadFile
InternetCrackUrlW
FtpDeleteFileA
FtpCommandA
GetUrlCacheHeaderData
DetectAutoProxyUrl
InternetCloseHandle
RetrieveUrlCacheEntryStreamW
InternetAttemptConnect
FtpCreateDirectoryW
InternetGetCookieW
FtpFindFirstFileW
GopherCreateLocatorA
GetUrlCacheGroupAttributeW
HttpQueryInfoA
SetUrlCacheGroupAttributeW
FtpRenameFileW
user32
CharToOemBuffA
GetMenu
InsertMenuItemW
DdeAbandonTransaction
WINNLSEnableIME
TranslateAccelerator
LoadMenuW
LoadCursorW
SwapMouseButton
AnyPopup
SetDlgItemTextW
GetCaretPos
ScrollDC
MoveWindow
RegisterWindowMessageW
UnregisterClassA
DdeCreateStringHandleA
GetScrollBarInfo
GetClipboardFormatNameW
SendMessageW
OpenWindowStationA
CharLowerA
InvertRect
DdeCreateStringHandleW
SetDlgItemInt
SetDlgItemTextA
CharPrevExA
OemToCharBuffW
ChangeDisplaySettingsW
SetClassWord
FillRect
ShowCaret
SetWinEventHook
GetClassInfoA
DefDlgProcA
SetWindowTextA
PostMessageW
CharUpperW
DrawEdge
CharLowerBuffA
PeekMessageW
LookupIconIdFromDirectory
CloseClipboard
UnhookWindowsHookEx
GetKeyboardState
CreateDesktopW
IsCharUpperA
GetDialogBaseUnits
GetDCEx
GetDlgCtrlID
GetDoubleClickTime
EnumPropsExA
GetNextDlgGroupItem
FlashWindowEx
SetUserObjectInformationW
GetCursorInfo
GetPriorityClipboardFormat
OpenInputDesktop
DragDetect
DispatchMessageA
SwitchDesktop
CallMsgFilter
GetKeyboardLayout
PtInRect
DdeSetUserHandle
LoadCursorA
CallMsgFilterA
DdeDisconnectList
TranslateAcceleratorA
EnumDesktopsA
LoadMenuA
GetCaretBlinkTime
TranslateMessage
SendNotifyMessageW
SetWindowRgn
ChangeDisplaySettingsExW
EnumDesktopsW
MessageBoxExW
GetMessageA
EnumPropsExW
DrawTextExA
GetCursor
MessageBeep
DdeAccessData
ScreenToClient
PaintDesktop
DrawMenuBar
GetSubMenu
DlgDirSelectExW
GetClassInfoExW
GetKeyboardLayoutList
UnionRect
SetMenuItemInfoA
GetWindowRgn
EnumPropsA
EndPaint
WinHelpW
CharNextA
GetClipboardData
SendIMEMessageExW
CreateIconIndirect
DlgDirListComboBoxW
IsCharAlphaNumericW
DdeGetData
GetClassLongA
MapVirtualKeyExA
IsDialogMessage
ToAsciiEx
IsDialogMessageW
TrackMouseEvent
OemToCharW
DlgDirSelectExA
LoadKeyboardLayoutA
UnpackDDElParam
DeferWindowPos
CreateDialogParamW
LoadStringW
ClipCursor
CreateIconFromResourceEx
GetClipboardSequenceNumber
CharToOemBuffW
GetKeyNameTextA
SetMenuContextHelpId
GetTitleBarInfo
IsCharUpperW
CloseWindowStation
DefFrameProcA
DefMDIChildProcA
RegisterDeviceNotificationW
SetClassLongW
MessageBoxIndirectW
LoadImageW
GetShellWindow
GetSystemMenu
GetThreadDesktop
GetScrollPos
ShowScrollBar
GetUserObjectSecurity
IsChild
GetKeyboardLayoutNameA
ToUnicodeEx
GetCapture
GetWindowLongW
CreatePopupMenu
EnumDisplayDevicesA
GetMenuStringW
GetUserObjectInformationA
GetMenuInfo
SetWindowLongW
LoadMenuIndirectA
SetSystemCursor
SetScrollPos
CallWindowProcW
UnloadKeyboardLayout
TileWindows
ArrangeIconicWindows
CallWindowProcA
RegisterClassW
DdeAddData
OemToCharA
DefWindowProcA
SetTimer
TrackPopupMenu
BringWindowToTop
GetWindowTextW
SetClassLongA
IsDlgButtonChecked
EnumDisplaySettingsW
GetParent
RemovePropA
FlashWindow
PostThreadMessageW
CheckRadioButton
UnregisterHotKey
ChangeDisplaySettingsExA
GetTabbedTextExtentA
GrayStringA
EnableWindow
WINNLSGetIMEHotkey
SystemParametersInfoA
GetClipCursor
MapVirtualKeyW
GetMenuDefaultItem
GetProcessWindowStation
ImpersonateDdeClientWindow
DialogBoxIndirectParamA
GetMenuCheckMarkDimensions
InvalidateRgn
SetWindowsHookExA
OemKeyScan
SetMessageExtraInfo
CreateIconFromResource
GetGUIThreadInfo
DdeSetQualityOfService
GetOpenClipboardWindow
DefDlgProcW
SetPropW
SetMessageQueue
TrackPopupMenuEx
GetUpdateRect
SetUserObjectInformationA
GetInputState
CreateDialogIndirectParamA
DialogBoxParamA
SetMenuItemBitmaps
FreeDDElParam
TranslateMDISysAccel
IsMenu
AdjustWindowRectEx
EnumDisplayDevicesW
SetWindowsHookA
GetComboBoxInfo
GetWindowInfo
RealGetWindowClass
EnumDesktopWindows
ReleaseCapture
CreateWindowStationW
GetNextDlgTabItem
DrawStateW
VkKeyScanExA
SetDoubleClickTime
SendNotifyMessageA
GetClientRect
OffsetRect
CreateAcceleratorTableW
InsertMenuW
SetScrollInfo
IsClipboardFormatAvailable
DdeCmpStringHandles
InsertMenuA
SetMenuDefaultItem
FindWindowA
wsprintfW
EnumPropsW
CallNextHookEx
GetSysColor
IsCharAlphaA
EndTask
DdeQueryConvInfo
GetDlgItemInt
SetWindowsHookW
DdeFreeDataHandle
DrawStateA
GetMessageTime
EnumWindowStationsW
DestroyCaret
PostMessageA
CreateDialogParamA
EndDeferWindowPos
CheckMenuItem
OpenWindowStationW
RegisterClassA
SetClipboardViewer
GetWindowTextA
CountClipboardFormats
GetMenuItemID
SetScrollRange
GetWindowTextLengthW
MessageBoxIndirectA
SetClipboardData
AppendMenuA
GetWindowRect
FindWindowExW
CharToOemW
SetProcessWindowStation
AppendMenuW
SetCursorPos
ShowCursor
LockWindowUpdate
GetPropW
CreateDesktopA
UpdateWindow
GetClipboardOwner
DefMDIChildProcW
GrayStringW
GetFocus
SetCapture
EnumDisplaySettingsExW
MapWindowPoints
LoadCursorFromFileA
BeginDeferWindowPos
DrawIconEx
GetMonitorInfoA
DrawFrame
SubtractRect
SetWindowTextW
IsDialogMessageA
LoadBitmapA
DdeInitializeA
DefFrameProcW
GetScrollRange
EnumDisplaySettingsA
TabbedTextOutA
ValidateRect
InSendMessage
DialogBoxParamW
SetThreadDesktop
FrameRect
CharUpperBuffA
EmptyClipboard
DispatchMessageW
IsCharLowerW
EndMenu
HideCaret
SetActiveWindow
wsprintfA
DdeReconnect
GetWindowPlacement
GetAncestor
LoadStringA
UnhookWindowsHook
InSendMessageEx
SetShellWindow
SetSysColors
wvsprintfW
DeleteMenu
GetAltTabInfo
GetDlgItemTextW
GetDlgItem
DdeCreateDataHandle
GetDC
VkKeyScanA
PostQuitMessage
RealChildWindowFromPoint
SystemParametersInfoW
CreateMenu
comdlg32
ChooseFontA
PageSetupDlgW
GetOpenFileNameW
FindTextA
PrintDlgA
GetFileTitleW
ChooseColorW
GetSaveFileNameW
GetOpenFileNameA
ReplaceTextW
FindTextW
ChooseColorA
PageSetupDlgA
GetFileTitleA
PrintDlgW
ReplaceTextA
Sections
.text Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 266KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ