Static task
static1
Behavioral task
behavioral1
Sample
0e84790dd5c1cd0351dcf1695bfe2362_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0e84790dd5c1cd0351dcf1695bfe2362_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0e84790dd5c1cd0351dcf1695bfe2362_JaffaCakes118
-
Size
332KB
-
MD5
0e84790dd5c1cd0351dcf1695bfe2362
-
SHA1
e5a7907b1bb3cc3102beeab8eb1cce0647d46f88
-
SHA256
a939af8165ae57981a8f41c9c0bc7553f522a71dd060fde033cdd36c40707dc1
-
SHA512
5faa245cded02f530f668e4e43a9e899e0283e536667c5d0d890148293bbafb83fad84a69f77c087718482cb9d547d350a4df057797c490add9cdf5c0150a7d5
-
SSDEEP
6144:Pz+zYzVEWJwmg/vdWnJ8pL4Gq1qGWSviHvyaOyyYlR1jabm9Qm298MZE8Tns2:Pz+EzOWJO/vdWmpVgWSvFYlR1jYma8YP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e84790dd5c1cd0351dcf1695bfe2362_JaffaCakes118
Files
-
0e84790dd5c1cd0351dcf1695bfe2362_JaffaCakes118.exe windows:5 windows x86 arch:x86
e78003f78d55b1d8d1738956ddf84cec
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextAlign
SetTextAlign
DeleteDC
GetLayout
GetPaletteEntries
DeleteObject
RestoreDC
SetLayout
SelectPalette
GetTextColor
GetClipBox
PatBlt
CreateCompatibleDC
SetWindowExtEx
SetWindowOrgEx
SetTextColor
GetTextCharset
CreateDIBPatternBrushPt
BitBlt
CreateRectRgnIndirect
StretchBlt
LPtoDP
CreatePolygonRgn
SetPaletteEntries
SetViewportExtEx
GetTextExtentPoint32W
ExtTextOutW
Rectangle
CreateFontW
SetRectRgn
CloseMetaFile
SetBkColor
SaveDC
SetMapMode
CreateDCW
EqualRgn
GetDIBits
GetTextExtentPointW
GetGlyphIndicesW
CreateSolidBrush
GetTextMetricsW
ExtCreateRegion
MoveToEx
GetDeviceCaps
CreateCompatibleBitmap
SelectObject
GetBkMode
DeleteEnhMetaFile
CreateRectRgn
CreateMetaFileW
GetTextExtentPoint32A
GetRegionData
GetTextExtentExPointI
CloseEnhMetaFile
CreateFontIndirectA
GetObjectW
GetSystemPaletteEntries
SetDCPenColor
SetViewportOrgEx
CreateFontIndirectW
SetStretchBltMode
CreateEnhMetaFileA
TextOutW
TextOutA
CreatePalette
GetStockObject
SetBkMode
PlayEnhMetaFile
RectVisible
GetObjectA
GetRgnBox
CreateBitmap
GetBrushOrgEx
CreatePen
OffsetRgn
IntersectClipRect
CreateDIBSection
CreateDCA
GetPixel
OffsetWindowOrgEx
RealizePalette
SetBrushOrgEx
StretchDIBits
CreatePatternBrush
LineTo
CombineRgn
GetBkColor
GetDCOrgEx
CreateHalftonePalette
user32
DdeCreateStringHandleW
FillRect
GetTopWindow
EnumChildWindows
PostMessageA
GetMessageA
CallWindowProcW
EnableWindow
DialogBoxIndirectParamA
MapWindowPoints
MessageBoxIndirectA
GetKeyNameTextW
DrawIconEx
SystemParametersInfoW
GetClassInfoExW
GetClassWord
DdeGetData
GetSubMenu
DestroyAcceleratorTable
PostThreadMessageA
MonitorFromWindow
TranslateAcceleratorW
GetClassInfoW
DdeInitializeW
SetMenu
MessageBoxExW
RegisterClipboardFormatA
DrawTextW
LockSetForegroundWindow
RedrawWindow
SetRect
CallNextHookEx
SetClipboardData
GetWindowRgnBox
CreateDialogParamW
GetFocus
DrawFocusRect
WindowFromPoint
CopyImage
GetMenuItemCount
GetDlgItemTextW
GetNextDlgTabItem
UpdateLayeredWindow
ReleaseCapture
CheckMenuRadioItem
GetSysColorBrush
LoadStringW
SetRectEmpty
AllowSetForegroundWindow
SendMessageW
DdeFreeStringHandle
IsDialogMessageW
IsCharAlphaNumericW
GetClipboardFormatNameW
GetAncestor
GetDC
LoadMenuW
TrackPopupMenuEx
TrackMouseEvent
GetSysColor
PostThreadMessageW
BeginDeferWindowPos
GetDoubleClickTime
GetWindowTextW
GetIconInfo
PeekMessageW
GetMessagePos
EndPaint
EnumWindows
PostQuitMessage
ShowCaret
DefWindowProcW
SetPropA
ChangeClipboardChain
IsMenu
GetClientRect
BeginPaint
DdeDisconnect
CharNextW
GetWindowTextLengthW
FindWindowA
GetMenuItemInfoA
SetClipboardViewer
IsWindowUnicode
CloseClipboard
GetComboBoxInfo
GetWindowLongW
OpenClipboard
IsWindowEnabled
DialogBoxParamW
CreateIconIndirect
GetWindowDC
IntersectRect
CheckDlgButton
MsgWaitForMultipleObjectsEx
AdjustWindowRect
RegisterWindowMessageW
GetDesktopWindow
PtInRect
RemovePropA
LoadCursorW
RegisterClipboardFormatW
EmptyClipboard
GetDlgCtrlID
CheckMenuItem
MonitorFromPoint
GetDlgItem
GetMonitorInfoW
UnionRect
GetPropW
SetScrollPos
IsIconic
SetPropW
SendMessageA
GetSystemMetrics
VkKeyScanExW
SetTimer
DdeQueryStringW
TranslateMessage
ShowOwnedPopups
GetWindow
LoadIconW
EqualRect
PostMessageW
DialogBoxIndirectParamW
DdeCreateDataHandle
LoadBitmapW
GetDialogBaseUnits
UnregisterClassW
MessageBoxW
ClientToScreen
MonitorFromRect
IsWindow
SendDlgItemMessageW
SetWindowsHookExW
SetCursor
ScreenToClient
GetKeyState
CopyRect
TrackPopupMenu
DrawFrameControl
EnumDesktopWindows
GetMenuDefaultItem
SetMenuItemBitmaps
GetWindowLongA
WinHelpW
GetSystemMenu
SetParent
SetMenuItemInfoW
SendNotifyMessageW
EndDialog
SetScrollInfo
GetLastActivePopup
FindWindowExW
GetForegroundWindow
MessageBoxExA
GetMessageTime
LoadStringA
EnumThreadWindows
GetCapture
CreateWindowExW
DdeNameService
MoveWindow
SetCursorPos
SetFocus
GetCursor
SetWindowTextW
GetMenuItemInfoW
GetScrollInfo
RegisterClassW
SetForegroundWindow
SetDlgItemInt
RemovePropW
ReleaseDC
IsDlgButtonChecked
DispatchMessageW
CheckRadioButton
IsChild
ShowWindow
AnimateWindow
DdeClientTransaction
DrawTextExW
GetMenuState
DefWindowProcA
SetWindowRgn
NotifyWinEvent
SystemParametersInfoA
DispatchMessageA
EndMenu
GetMenuStringW
OffsetRect
GetMessageW
SetDlgItemTextW
SetWindowPlacement
GetClassLongW
GetWindowRect
LoadImageW
SetWindowPos
wsprintfW
CharUpperW
HideCaret
SetWindowLongA
DialogBoxParamA
InvalidateRect
UnhookWindowsHookEx
InsertMenuItemW
LoadAcceleratorsW
CharNextA
SendMessageTimeoutW
PeekMessageA
MapVirtualKeyW
CharLowerBuffW
SetCapture
AdjustWindowRectEx
DdeConnect
CharPrevA
GetActiveWindow
LoadCursorA
SendMessageTimeoutA
ShowScrollBar
GetMenuItemID
GetWindowPlacement
GetPropA
SetActiveWindow
KillTimer
UpdateWindow
DdeFreeDataHandle
CharPrevW
GetWindowThreadProcessId
CreatePopupMenu
GetClassNameW
MapDialogRect
GetLastInputInfo
SetMenuDefaultItem
WaitMessage
GetShellWindow
RegisterWindowMessageA
RegisterClassExW
DeferWindowPos
AppendMenuW
CallMsgFilterW
InsertMenuW
WaitForInputIdle
DestroyMenu
GetAsyncKeyState
GetWindowInfo
GetProcessWindowStation
FindWindowW
IsHungAppWindow
GetClipboardData
DestroyIcon
CharLowerW
DrawEdge
IsWindowVisible
SetWindowLongW
RemoveMenu
CopyIcon
MsgWaitForMultipleObjects
CreateMenu
GetParent
InflateRect
EndDeferWindowPos
GetKeyboardLayout
DeleteMenu
EnableMenuItem
IsRectEmpty
DestroyWindow
MessageBeep
ChildWindowFromPoint
DdeUninitialize
MessageBoxIndirectW
EnumDisplaySettingsW
GetCursorPos
AttachThreadInput
uxtheme
GetThemeBackgroundExtent
GetThemeColor
OpenThemeData
CloseThemeData
GetThemeMetric
SetWindowTheme
GetThemeMargins
GetThemeAppProperties
DrawThemeParentBackground
GetThemeFont
GetThemeBackgroundContentRect
IsThemeActive
GetThemePartSize
DrawThemeBackground
IsAppThemed
kernel32
LCMapStringW
TerminateThread
CreateEventW
InitializeCriticalSectionAndSpinCount
SetCurrentDirectoryA
ResumeThread
GetPrivateProfileSectionW
GlobalUnlock
SetEvent
DeleteTimerQueueTimer
FreeLibraryAndExitThread
lstrcmpiA
GetUserDefaultLCID
CreateFileMappingW
SetErrorMode
ExpandEnvironmentStringsW
OpenProcess
OpenMutexW
VirtualAlloc
LoadLibraryExW
TerminateProcess
LockResource
UnhandledExceptionFilter
CreateMutexW
SetEndOfFile
CreateProcessW
GetModuleHandleExA
Process32NextW
GlobalFlags
LocalFileTimeToFileTime
LoadLibraryA
TlsGetValue
ReplaceFileW
HeapFree
FindNextFileW
lstrlenW
CreateFileMappingA
GetSystemInfo
GetExitCodeThread
InterlockedIncrement
WaitForSingleObjectEx
GlobalFree
FindResourceW
GetCurrentThread
GetCurrentDirectoryW
QueryPerformanceFrequency
SetUnhandledExceptionFilter
GetDateFormatW
GetLogicalDriveStringsW
GetVersion
QueueUserWorkItem
ExitProcess
VirtualProtect
GetModuleHandleA
WaitForSingleObject
LeaveCriticalSection
GetFileAttributesExW
GetCurrentThreadId
GetFullPathNameW
GetFileSizeEx
MultiByteToWideChar
EnterCriticalSection
VirtualQuery
Sleep
GetLocalTime
GetProcessHeap
SetThreadPriority
CreateThread
Process32FirstW
GetTempFileNameW
DuplicateHandle
LoadLibraryW
DebugBreak
GetThreadLocale
SizeofResource
AddAtomW
MapViewOfFile
GetFileAttributesA
ReadFile
GetACP
GetModuleHandleW
lstrcmpA
EnumUILanguagesW
SetProcessShutdownParameters
GetFileAttributesW
GetLastError
DeleteFileW
GlobalSize
CreateToolhelp32Snapshot
SetEnvironmentVariableW
GetCurrentProcessId
FileTimeToLocalFileTime
QueryDosDeviceW
HeapAlloc
WritePrivateProfileStringW
FreeLibrary
InterlockedExchange
GetCPInfo
SetFileTime
MulDiv
GetVersionExA
GetVersionExW
LocalFree
CreateFileA
FindAtomW
CompareFileTime
MoveFileW
LoadResource
WideCharToMultiByte
ReleaseActCtx
FindResourceExW
CreateTimerQueueTimer
lstrcmpW
FileTimeToSystemTime
SetThreadExecutionState
GetSystemDefaultUILanguage
SystemTimeToFileTime
CloseHandle
OutputDebugStringA
GetLocaleInfoW
GetAtomNameW
DisableThreadLibraryCalls
CreateDirectoryW
OpenEventW
GetTempPathW
GetCurrentProcess
QueryPerformanceCounter
GetModuleFileNameA
GetEnvironmentVariableW
GetSystemDirectoryW
GlobalReAlloc
GetTimeFormatW
GetNumberFormatW
GlobalAddAtomW
CreateEventA
GetSystemDefaultLCID
GetPrivateProfileStringW
ReleaseMutex
GetSystemTime
SetFilePointer
GetWindowsDirectoryW
ReleaseSemaphore
lstrcmpiW
LockFileEx
SetProcessWorkingSetSize
MoveFileExW
GetPrivateProfileStringA
WaitForMultipleObjects
ExpandEnvironmentStringsA
GetPrivateProfileSectionNamesW
FormatMessageW
InitializeCriticalSection
GetUserDefaultUILanguage
OpenMutexA
GlobalLock
GetFileInformationByHandle
TryEnterCriticalSection
HeapDestroy
LocalReAlloc
CompareStringW
SetLastError
WriteFile
GetLongPathNameW
UnlockFileEx
TlsFree
SetFileAttributesW
DeactivateActCtx
SetCurrentDirectoryW
GetProcAddress
GetModuleHandleExW
InterlockedCompareExchange
lstrlenA
GetTickCount
LocalSize
GlobalAddAtomA
GlobalAlloc
CreateFileW
SearchPathW
HeapReAlloc
GetThreadContext
ActivateActCtx
TlsSetValue
FindFirstFileW
DeleteCriticalSection
VirtualFree
GetFileSize
UnmapViewOfFile
RemoveDirectoryW
FindClose
ResetEvent
FlushInstructionCache
GetModuleFileNameW
InterlockedDecrement
CompareStringA
GetSystemTimeAsFileTime
IsDBCSLeadByte
CreateMutexA
GetSystemWow64DirectoryW
DeleteAtom
GetThreadPriority
CreateDirectoryA
WritePrivateProfileSectionW
GetShortPathNameW
CopyFileW
CreateSemaphoreW
RaiseException
IsWow64Process
HeapCreate
LocalAlloc
SetFilePointerEx
GlobalDeleteAtom
CreateActCtxW
TlsAlloc
GetSystemDirectoryA
SetThreadContext
SuspendThread
psapi
GetProcessImageFileNameW
ntdll
LdrGetDllHandle
RtlUshortByteSwap
NtAllocateVirtualMemory
advapi32
CryptAcquireContextW
RegCreateKeyExW
TraceMessage
ConvertStringSidToSidW
RegOpenCurrentUser
RegCloseKey
RegOpenKeyExA
GetTokenInformation
UnregisterTraceGuids
GetTraceEnableFlags
RegisterTraceGuidsW
GetTraceEnableLevel
RegEnumKeyExW
CryptGetHashParam
SetTokenInformation
GetTraceLoggerHandle
RegOpenKeyW
RegDeleteKeyW
RegSetValueExW
RegEnumValueA
GetUserNameW
RegQueryValueExA
RegQueryInfoKeyW
RegDeleteKeyA
CryptReleaseContext
IsTextUnicode
ImpersonateSelf
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegDeleteValueW
OpenProcessToken
TraceEvent
DuplicateTokenEx
RegCreateKeyA
RegOpenKeyExW
RegCreateKeyExA
OpenThreadToken
RegEnumKeyW
ConvertSidToStringSidW
CryptHashData
RegEnumValueW
CryptCreateHash
SetThreadToken
GetLengthSid
RegDeleteValueA
CreateProcessAsUserW
RegSetValueExA
RegQueryValueExW
RegQueryValueW
CryptDestroyHash
shell32
SHGetSpecialFolderPathW
SHGetFileInfoW
SHGetPathFromIDListA
ShellExecuteA
SHGetInstanceExplorer
DragQueryFileW
SHGetFolderPathAndSubDirW
ShellExecuteExW
ExtractIconW
Shell_NotifyIconA
Shell_NotifyIconW
SHAppBarMessage
ExtractIconExW
SHGetPathFromIDListW
SHFileOperationW
SHGetDataFromIDListW
SHGetSpecialFolderLocation
ShellExecuteW
SHGetFolderLocation
SHGetDesktopFolder
SHCreateShellItem
SHBrowseForFolderW
ExtractAssociatedIconExW
SHGetFolderPathW
SHSetLocalizedName
ShellAboutW
SHBindToParent
SHPathPrepareForWriteW
SHChangeNotify
Sections
.text Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE