Static task
static1
Behavioral task
behavioral1
Sample
0eab15a32eeb951273715394cbf1d4c6_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0eab15a32eeb951273715394cbf1d4c6_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0eab15a32eeb951273715394cbf1d4c6_JaffaCakes118
-
Size
1.2MB
-
MD5
0eab15a32eeb951273715394cbf1d4c6
-
SHA1
9ed72132c0dec0394c781c437703fd095a6c863d
-
SHA256
ea1935e1c03203c11f6a215587a879e22b9ddbd214b05443d29ca8d1f768b9e5
-
SHA512
b0240d0bbc0b5014f9a36ce7fa57e05e1a70e7bdfb53f643d277b30384114a3a3a7d50571d5b7ca16d7bf76e0cd220d2555fdf3b0cb64ae8922177172cf0c834
-
SSDEEP
24576:eeTwQmqh2WuwohM6hXCJIX069qP/rPX0699KFKfr:5KHWuwohphXCJIX069qP/rPX0699KFKD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eab15a32eeb951273715394cbf1d4c6_JaffaCakes118
Files
-
0eab15a32eeb951273715394cbf1d4c6_JaffaCakes118.exe windows:4 windows x86 arch:x86
dcdeb73358dc206989f4b7c3ddebf92a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
GetUserDefaultLCID
GetSystemTimeAsFileTime
IsValidLocale
IsValidCodePage
GetLocaleInfoW
SetEnvironmentVariableA
GetCurrentProcessId
QueryPerformanceCounter
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
IsBadWritePtr
InterlockedExchange
VirtualFree
HeapCreate
HeapDestroy
HeapSize
GetFileType
SetStdHandle
TerminateProcess
HeapReAlloc
ExitProcess
GetCommandLineA
GetStartupInfoA
VirtualQuery
GetSystemInfo
VirtualAlloc
RtlUnwind
SetErrorMode
GetFileTime
GetOEMCP
InterlockedIncrement
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
GetFullPathNameA
GetVolumeInformationA
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
VirtualProtect
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
FreeResource
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
lstrcpynA
GetModuleHandleA
FreeLibrary
lstrcatA
lstrcpyA
GetCPInfo
CompareStringW
CompareStringA
lstrlenW
lstrcmpiA
GetVersion
RaiseException
CreateThread
FindFirstFileA
GetFileAttributesA
SetFileAttributesA
RemoveDirectoryA
DeleteFileA
FindNextFileA
FindClose
SetFilePointer
GetTickCount
InterlockedDecrement
Sleep
GetCurrentProcess
LoadLibraryA
GetProcAddress
lstrlenA
MultiByteToWideChar
GetModuleFileNameA
OutputDebugStringA
GetPrivateProfileStringA
WritePrivateProfileStringA
WriteFile
DeleteCriticalSection
CreateEventA
InitializeCriticalSection
HeapAlloc
ReadFile
CreateFileA
GetFileSize
CloseHandle
GetLastError
WaitForSingleObject
ResetEvent
EnterCriticalSection
LeaveCriticalSection
SetEvent
GetProcessHeap
HeapFree
MulDiv
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
EnumSystemLocalesA
user32
ReleaseCapture
SetCapture
DestroyMenu
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
PostQuitMessage
MapDialogRect
wsprintfA
CreateDialogIndirectParamA
EndDialog
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetDlgItemInt
GetDlgItemInt
EndPaint
BeginPaint
GetMenuStringA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageA
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
AdjustWindowRectEx
LoadBitmapA
DrawTextA
CharNextA
IsRectEmpty
CopyAcceleratorTableA
InvalidateRgn
GetNextDlgGroupItem
GetClientRect
SetTimer
KillTimer
EqualRect
DeferWindowPos
RegisterClassA
GetDlgCtrlID
CallWindowProcA
SetWindowPos
IntersectRect
GetWindowPlacement
GetWindow
SetRectEmpty
MessageBeep
SetWindowLongA
IsWindow
GetMessagePos
ScreenToClient
PtInRect
GetKeyState
GetClassInfoA
DefWindowProcA
LoadCursorA
GetCursorPos
GetFocus
RedrawWindow
IsWindowVisible
SetCursor
DestroyCursor
GetWindowLongA
WindowFromPoint
GetParent
GetDCEx
LockWindowUpdate
GetNextDlgTabItem
GetActiveWindow
ClientToScreen
DrawFocusRect
FrameRect
OffsetRect
IsMenu
DrawStateA
GetWindowDC
GetMenuItemInfoA
SystemParametersInfoA
DrawIconEx
DestroyIcon
GrayStringA
DrawTextExA
TabbedTextOutA
GetDesktopWindow
ReleaseDC
RegisterClipboardFormatA
SetParent
PostThreadMessageA
TrackPopupMenu
EnableWindow
LoadImageA
PostMessageA
FillRect
SendMessageA
InvalidateRect
InflateRect
DrawIcon
DeleteMenu
AppendMenuA
GetSystemMenu
IsIconic
GetWindowRect
LoadIconA
ExitWindowsEx
GetSystemMetrics
MessageBoxA
CharUpperA
UnregisterClassA
SetRect
CopyRect
GetSysColor
GetSysColorBrush
DrawEdge
CreateMenu
CreatePopupMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
GetSubMenu
ModifyMenuA
GetDC
gdi32
GetTextColor
GetRgnBox
GetClipBox
GetCurrentObject
GetCharWidthA
StretchDIBits
GetMapMode
SetRectRgn
CreateRectRgnIndirect
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
RestoreDC
SaveDC
GetBkColor
SetBkMode
PlgBlt
SetBkColor
SetTextColor
CreateRectRgn
CombineRgn
GetTextExtentPoint32W
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
SetPixel
GetPixel
PatBlt
Ellipse
GetBkMode
CreatePen
CreateDIBSection
SetDIBColorTable
GetStockObject
DeleteObject
SelectObject
DeleteDC
CreateFontIndirectA
CreateSolidBrush
GetDIBColorTable
GetTextExtentPoint32A
StretchBlt
BitBlt
GetObjectA
CreateFontA
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
GetDeviceCaps
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
OpenProcessToken
RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
LookupPrivilegeValueA
AdjustTokenPrivileges
shell32
ShellExecuteExA
SHGetSpecialFolderPathA
ShellExecuteA
comctl32
ImageList_GetImageCount
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Draw
_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_Create
shlwapi
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA
oledlg
ord8
ole32
CoRevokeClassObject
OleInitialize
OleFlushClipboard
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoTaskMemAlloc
OleIsCurrentClipboard
CoTaskMemFree
CoInitialize
CoCreateInstance
OleRun
CreateILockBytesOnHGlobal
oleaut32
SysAllocString
SysFreeString
VariantInit
VariantCopy
VariantChangeType
VariantClear
SysAllocStringLen
SafeArrayDestroy
SafeArrayPutElement
SafeArrayCreate
SysStringLen
SysAllocStringByteLen
SystemTimeToVariantTime
OleCreateFontIndirect
GetErrorInfo
rasapi32
RasGetEntryDialParamsA
RasDialA
RasGetProjectionInfoA
RasHangUpA
RasEnumEntriesA
RasGetConnectStatusA
RasEnumConnectionsA
wininet
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
DeleteUrlCacheEntry
InternetGetConnectedState
InternetSetStatusCallback
InternetOpenA
InternetConnectA
InternetAttemptConnect
InternetSetCookieA
HttpSendRequestA
HttpOpenRequestA
InternetQueryOptionA
HttpAddRequestHeadersA
HttpSendRequestExA
InternetQueryDataAvailable
HttpEndRequestA
InternetReadFile
InternetWriteFile
InternetCloseHandle
InternetSetOptionA
HttpQueryInfoA
gdiplus
GdipCloneImage
GdipAlloc
GdipDrawImageI
GdipGetImageGraphicsContext
GdipFree
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdiplusShutdown
winmm
PlaySoundA
ws2_32
gethostbyname
gethostname
inet_ntoa
Sections
.text Size: 336KB - Virtual size: 336KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 756KB - Virtual size: 756KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 30KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE