Static task
static1
Behavioral task
behavioral1
Sample
0aca08d87d936f210507558c84d35b0f_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0aca08d87d936f210507558c84d35b0f_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0aca08d87d936f210507558c84d35b0f_JaffaCakes118
-
Size
1004KB
-
MD5
0aca08d87d936f210507558c84d35b0f
-
SHA1
a7bbb1716b34f1a3187f244cc01a16dfef5fa0f0
-
SHA256
4947fabfb898ec7592ee9f3d4e688b76d0086bf3bb90d48226021ce917938b88
-
SHA512
118c620a9112132d7709f99ec053a357f5983540115282fa83eef047fef2a28d7b8d34a70478616937b933d3d4a11a943fb60b6b95b1c8447dac03568fda51d9
-
SSDEEP
24576:rhL0ESyBFju3wD5CLls/AcUaqbwt6zw24gk+bM:rJ0Envq3wVCLaoDadwwpX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0aca08d87d936f210507558c84d35b0f_JaffaCakes118
Files
-
0aca08d87d936f210507558c84d35b0f_JaffaCakes118.exe windows:4 windows x86 arch:x86
4250b68f938000e42071f6126e05e4fd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
ole32
CreateBindCtx
StgIsStorageILockBytes
OleCreateLinkFromData
CoFreeUnusedLibraries
OleSetMenuDescriptor
OleDestroyMenuDescriptor
OleLoad
CoRevokeClassObject
OleIsRunning
OleConvertOLESTREAMToIStorage
CoRegisterClassObject
OleCreateFromData
OleGetAutoConvert
OleCreateFromFile
StgCreateDocfileOnILockBytes
OleCreateLink
BindMoniker
RegisterDragDrop
OleLoadFromStream
OleIsCurrentClipboard
CoMarshalInterface
CreateDataAdviseHolder
CoDisconnectObject
OleGetClipboard
OleFlushClipboard
StgOpenStorageOnILockBytes
CoCreateInstance
IsAccelerator
OleCreateLinkToFile
ReadClassStm
CoLockObjectExternal
StringFromGUID2
OleGetIconOfClass
OleUninitialize
IIDFromString
CoIsOle1Class
CoUnmarshalInterface
StgCreateDocfile
OleQueryLinkFromData
OleSaveToStream
OleSetClipboard
OleDuplicateData
GetClassFile
ProgIDFromCLSID
OleLockRunning
WriteClassStg
OleSave
CreateOleAdviseHolder
CreateStreamOnHGlobal
CLSIDFromString
OleConvertIStorageToOLESTREAM
DoDragDrop
OleCreateMenuDescriptor
CoGetClassObject
OleRegGetUserType
OleInitialize
StringFromCLSID
CoRegisterMessageFilter
OleRun
CLSIDFromProgID
OleTranslateAccelerator
CreateILockBytesOnHGlobal
StgOpenStorage
ReadClassStg
OleDoAutoConvert
ReleaseStgMedium
RevokeDragDrop
OleQueryCreateFromData
MkParseDisplayName
CoGetMalloc
ws2_32
WSAConnect
WSAAccept
olecli32
OleEqual
kernel32
SetFileAttributesA
GlobalFree
ExitProcess
SetStdHandle
CloseHandle
RtlUnwind
GetLocalTime
CreateProcessW
ResumeThread
UnhandledExceptionFilter
GetStringTypeA
lstrlenA
_lwrite
lstrcpynA
CreateDirectoryA
lstrcmpiA
GetProcAddress
FreeEnvironmentStringsW
TerminateProcess
GlobalReAlloc
GetCurrentThreadId
GlobalUnlock
WaitForSingleObject
FileTimeToLocalFileTime
GetVersion
ReleaseSemaphore
SearchPathA
GetSystemDefaultLangID
SetCurrentDirectoryA
GetModuleHandleA
SetHandleCount
VirtualAlloc
FindClose
GetFileAttributesA
GetStdHandle
FindFirstFileA
GetSystemTime
SetLastError
TlsAlloc
FreeLibrary
ReadFile
TlsGetValue
GetLocaleInfoA
LockResource
GlobalSize
LCMapStringA
GetACP
SetFileTime
GetCurrentProcessId
GlobalHandle
LoadLibraryExA
RemoveDirectoryA
VirtualQuery
SetFilePointer
GlobalAddAtomA
RaiseException
WriteFile
LoadResource
InterlockedIncrement
WideCharToMultiByte
GetFullPathNameA
GetOEMCP
ExitThread
MoveFileA
GetSystemDirectoryA
TlsFree
SetLocalTime
CreateFileA
SetEvent
MultiByteToWideChar
SetEndOfFile
GlobalDeleteAtom
UnlockFile
CreateProcessA
GlobalLock
GetFileType
GetLastError
HeapFree
GetEnvironmentStringsW
InterlockedDecrement
DuplicateHandle
GetTempFileNameA
Sleep
CreateEventA
GetModuleFileNameW
GetStartupInfoA
GetExitCodeProcess
LoadLibraryA
HeapAlloc
GetTickCount
GetShortPathNameA
HeapSize
GetFileTime
GetEnvironmentStrings
HeapReAlloc
GetSystemDefaultLCID
FlushFileBuffers
FormatMessageW
FileTimeToSystemTime
GetSystemInfo
DeleteCriticalSection
GetModuleFileNameA
VirtualFree
MulDiv
GetUserDefaultLangID
GetUserDefaultLCID
InitializeCriticalSection
CompareStringA
LockFile
SystemTimeToFileTime
GetStringTypeExA
SetErrorMode
GetCurrentDirectoryA
CreateThread
GetTimeZoneInformation
FreeResource
FlushInstructionCache
HeapCreate
GetCurrentProcess
SizeofResource
LeaveCriticalSection
GetWindowsDirectoryA
ResetEvent
_llseek
WinExec
GetCPInfo
GlobalAlloc
GetTempPathA
GetVersionExA
FreeEnvironmentStringsA
CompareStringW
lstrcatA
VirtualProtect
LCMapStringW
lstrcmpA
lstrcmpiW
_lread
GetDateFormatA
EnterCriticalSection
SetEnvironmentVariableA
IsBadReadPtr
_lclose
IsDBCSLeadByte
GetProfileStringA
HeapDestroy
GetCommandLineA
FindNextFileA
lstrcpyA
IsBadCodePtr
GetDriveTypeA
FindResourceA
FormatMessageA
GetStringTypeW
GetVolumeInformationA
DeleteFileA
TlsSetValue
CreateSemaphoreA
user32
DestroyIcon
DestroyMenu
InsertMenuA
SetScrollInfo
InflateRect
EmptyClipboard
DestroyAcceleratorTable
SetWindowTextA
DdeConnect
GetCapture
SendDlgItemMessageA
IsWindowEnabled
keybd_event
PostThreadMessageA
SetWindowsHookExA
CreateDialogParamA
WaitForInputIdle
FillRect
RegisterClassExA
GetForegroundWindow
LoadStringA
OpenClipboard
MapWindowPoints
BeginDeferWindowPos
GetClassInfoA
GetClipboardFormatNameA
CheckMenuItem
GetSystemMetrics
DdeNameService
PostQuitMessage
DefMDIChildProcA
MessageBoxA
IsIconic
GetCaretPos
KillTimer
DdeGetData
DeferWindowPos
SetCaretPos
GetClassInfoExA
RegisterClassA
LoadCursorA
EndDialog
UnhookWindowsHookEx
ModifyMenuA
GetMenu
LoadBitmapA
BeginPaint
TranslateMessage
wsprintfA
CharToOemBuffA
CloseClipboard
GetKeyState
GetFocus
FindWindowA
InvalidateRect
IsCharAlphaA
EnableMenuItem
DdeCreateStringHandleA
GetSysColor
OemToCharA
EnumThreadWindows
GetMenuItemInfoA
SetFocus
GetUpdateRgn
DdeInitializeA
GetWindowThreadProcessId
GetMenuStringA
GetCursor
DdeSetUserHandle
LoadIconA
CopyRect
DestroyCaret
GetMessageTime
AdjustWindowRect
CharUpperA
VkKeyScanA
CreateIcon
DrawFocusRect
SetWindowLongA
ReleaseCapture
GetMenuState
EqualRect
VkKeyScanW
EnableWindow
HideCaret
CharLowerBuffA
DdeCmpStringHandles
WaitMessage
DdeUninitialize
MessageBoxIndirectA
PostMessageA
InvalidateRgn
GetSystemMenu
GetDlgItem
EndPaint
IsDialogMessageA
DdeCreateDataHandle
SetWindowPos
IsWindowVisible
FrameRect
IsChild
CreateCursor
ShowScrollBar
CharNextA
LockWindowUpdate
SetRect
IntersectRect
CreateAcceleratorTableA
WindowFromPoint
DestroyWindow
CharToOemA
FindWindowW
OffsetRect
SetCursor
CreateWindowExA
GetAsyncKeyState
GetKeyboardLayout
EndDeferWindowPos
SetScrollRange
GetPropA
CallWindowProcA
SystemParametersInfoA
DdeFreeDataHandle
UnregisterClassA
SetActiveWindow
SubtractRect
EnumClipboardFormats
SetCursorPos
DdePostAdvise
GetClientRect
GetSubMenu
GetTabbedTextExtentA
CharUpperBuffW
LoadImageA
AdjustWindowRectEx
SetScrollPos
SetMenuItemInfoA
MsgWaitForMultipleObjects
ShowCursor
SetForegroundWindow
CharLowerBuffW
SetDlgItemTextA
CopyAcceleratorTableA
SetKeyboardState
RemoveMenu
GetMenuItemCount
GetMenuItemID
DdeAbandonTransaction
SetCapture
ClipCursor
MoveWindow
DefFrameProcA
PostMessageW
DrawIcon
DefWindowProcA
DispatchMessageA
GetClassNameA
IsRectEmpty
CharUpperBuffA
TranslateMDISysAccel
GetScrollInfo
LoadAcceleratorsA
SetPropA
GetClipboardData
GetWindowTextLengthA
CreateMenu
TrackPopupMenu
SetParent
ScreenToClient
GetQueueStatus
DdeQueryConvInfo
GetKeyboardState
IsZoomed
GetWindowTextA
GetMessagePos
CreateCaret
DestroyCursor
IsWindow
GetWindowRgn
DialogBoxParamA
GetWindowDC
TabbedTextOutA
PeekMessageW
GetUpdateRect
WinHelpA
AttachThreadInput
SetTimer
DdeQueryStringA
DrawFrameControl
GetDoubleClickTime
PtInRect
DdeDisconnect
SetClipboardData
CharPrevA
GetCaretBlinkTime
GetDCEx
GetWindowRect
GetDC
DrawTextA
GetWindow
GetParent
DeleteMenu
GetLastActivePopup
ReleaseDC
SetWindowRgn
ShowWindow
CharLowerA
CreatePopupMenu
DdeGetLastError
DdeFreeStringHandle
GetCursorPos
CallNextHookEx
PeekMessageA
GetScrollPos
SetWindowContextHelpId
BringWindowToTop
GetDesktopWindow
SetMenuDefaultItem
RegisterClipboardFormatA
AppendMenuA
SetWindowsHookExW
DdeClientTransaction
SendMessageA
ToAscii
DrawMenuBar
ClientToScreen
GetIconInfo
MessageBeep
SetMenu
IsClipboardFormatAvailable
RemovePropA
GetActiveWindow
UpdateWindow
ShowCaret
GetWindowLongA
advapi32
RegEnumValueW
RegSetValueExW
RegOpenKeyExA
AdjustTokenPrivileges
InitializeSecurityDescriptor
RegSetValueExA
LookupPrivilegeValueA
RegQueryValueExW
RegDeleteValueA
SetSecurityDescriptorDacl
RegOpenKeyW
RegOpenKeyA
ReportEventA
RegisterEventSourceA
RegQueryValueA
RegCreateKeyW
RegEnumKeyW
OpenProcessToken
RegCreateKeyA
RegQueryInfoKeyA
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
RegEnumValueA
DeregisterEventSource
RegSetValueA
RegDeleteValueW
RegQueryValueExA
RegDeleteKeyW
ddraw
DirectDrawEnumerateA
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 248KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 708KB - Virtual size: 12.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE