Static task
static1
Behavioral task
behavioral1
Sample
225ba3486dd11b200771095d14e2ac8c_JaffaCakes118.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
225ba3486dd11b200771095d14e2ac8c_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
225ba3486dd11b200771095d14e2ac8c_JaffaCakes118
-
Size
332KB
-
MD5
225ba3486dd11b200771095d14e2ac8c
-
SHA1
a527984ab0bbeb4ec3553163e01eab5d8adb39e1
-
SHA256
79859c832e166aa9db16ec0314e4c5656c961fe4dc9b91e7bd2b5c978f73b724
-
SHA512
9bee694336543e5bcd052f332af05bb253ee5881c47f81859d1f307f03e13410c1d4634aed342d2a9c3d1bc62501e87b43311500663f4a1627a70e8aae7571a4
-
SSDEEP
6144:KicGo6UntNjZJqmegI55Qqw+tDWkRxncRQf6Dvj+ImbnywKuJjQByE6N9XXAP:KiAt5mh5Qqw+tRp/yjQywKu1E6N5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 225ba3486dd11b200771095d14e2ac8c_JaffaCakes118
Files
-
225ba3486dd11b200771095d14e2ac8c_JaffaCakes118.exe windows:5 windows x86 arch:x86
2af92dd9b2686ab0981629e8b12b798a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
uxtheme
GetThemeMetric
GetThemeColor
IsThemeActive
GetThemeBackgroundExtent
DrawThemeBackground
GetThemeMargins
SetWindowTheme
GetThemeFont
DrawThemeParentBackground
OpenThemeData
GetThemeBackgroundContentRect
GetThemePartSize
IsAppThemed
GetThemeAppProperties
CloseThemeData
shell32
SHGetFolderLocation
SHGetInstanceExplorer
SHGetFolderPathW
SHChangeNotify
ShellExecuteA
SHSetLocalizedName
SHAppBarMessage
Shell_NotifyIconW
ExtractAssociatedIconExW
SHGetDesktopFolder
Shell_NotifyIconA
SHGetSpecialFolderLocation
ShellAboutW
SHGetFolderPathAndSubDirW
SHBindToParent
SHGetFileInfoW
ExtractIconExW
ShellExecuteExW
SHFileOperationW
SHGetPathFromIDListA
SHCreateShellItem
SHGetDataFromIDListW
DragQueryFileW
SHPathPrepareForWriteW
SHBrowseForFolderW
ShellExecuteW
SHGetSpecialFolderPathW
SHGetPathFromIDListW
ExtractIconW
kernel32
CreateMutexW
WriteFile
DeleteFileW
TryEnterCriticalSection
LoadResource
GetTickCount
TlsFree
WritePrivateProfileSectionW
FileTimeToSystemTime
GetSystemDefaultLCID
GetThreadPriority
DeleteTimerQueueTimer
GetModuleHandleExW
GetAtomNameW
IsWow64Process
GetCurrentThreadId
GetPrivateProfileStringW
HeapCreate
LocalAlloc
HeapAlloc
GetWindowsDirectoryW
QueryPerformanceFrequency
GetACP
ReleaseSemaphore
lstrcmpiA
SetEnvironmentVariableW
QueueUserWorkItem
LCMapStringW
ExpandEnvironmentStringsA
HeapDestroy
GetPrivateProfileSectionW
lstrcmpW
LeaveCriticalSection
HeapReAlloc
GetUserDefaultUILanguage
SetFileTime
DeleteAtom
GetPrivateProfileStringA
VirtualAlloc
DuplicateHandle
WaitForSingleObject
CreateFileA
MultiByteToWideChar
FindClose
EnterCriticalSection
SizeofResource
SetThreadContext
UnhandledExceptionFilter
SetFilePointer
GetFileAttributesA
QueryDosDeviceW
GlobalFree
FindFirstFileW
GetFileInformationByHandle
GlobalAddAtomW
GetFileAttributesW
OpenMutexW
ResumeThread
GetSystemDirectoryA
FindNextFileW
GetLocalTime
FormatMessageW
GlobalSize
OpenProcess
GetTimeFormatW
GetLastError
InitializeCriticalSectionAndSpinCount
GetSystemDefaultUILanguage
GetVersionExW
GetTempPathW
SetUnhandledExceptionFilter
GetProcessHeap
GlobalAlloc
lstrlenA
lstrlenW
GlobalLock
GetLogicalDriveStringsW
CreateFileMappingW
GetSystemTime
GetProcAddress
FreeLibrary
SetEndOfFile
GlobalUnlock
CreateTimerQueueTimer
OutputDebugStringA
GetModuleHandleExA
WaitForSingleObjectEx
InterlockedIncrement
GetEnvironmentVariableW
WaitForMultipleObjects
SuspendThread
MapViewOfFile
SetErrorMode
HeapFree
GetModuleFileNameW
GetSystemDirectoryW
GetFileSize
SetThreadExecutionState
FlushInstructionCache
GetFullPathNameW
FreeLibraryAndExitThread
ResetEvent
FindAtomW
ActivateActCtx
CreateDirectoryA
GetVersion
QueryPerformanceCounter
GetSystemInfo
TlsSetValue
SetProcessWorkingSetSize
GetVersionExA
lstrcmpiW
OpenMutexA
CreateProcessW
VirtualFree
GetDateFormatW
GetCPInfo
SetFilePointerEx
LockFileEx
CreateMutexA
InterlockedExchange
GetModuleHandleA
CloseHandle
GetModuleHandleW
FileTimeToLocalFileTime
CreateEventA
CreateEventW
GetFileAttributesExW
LockResource
IsDBCSLeadByte
SetEvent
WritePrivateProfileStringW
MoveFileW
GetCurrentProcess
InitializeCriticalSection
WideCharToMultiByte
GetPrivateProfileSectionNamesW
CreateFileW
LoadLibraryW
ReleaseActCtx
GetSystemTimeAsFileTime
GetUserDefaultLCID
RaiseException
DebugBreak
GlobalReAlloc
FindResourceW
InterlockedDecrement
OpenEventW
MoveFileExW
CreateActCtxW
ReplaceFileW
LocalSize
GetModuleFileNameA
CreateFileMappingA
TerminateThread
GetThreadLocale
LoadLibraryExW
Sleep
LocalFileTimeToFileTime
CopyFileW
GetShortPathNameW
AddAtomW
SetCurrentDirectoryA
ExitProcess
RemoveDirectoryW
LoadLibraryA
GetSystemWow64DirectoryW
CompareFileTime
SetFileAttributesW
GetLongPathNameW
TlsGetValue
CreateThread
InterlockedCompareExchange
SystemTimeToFileTime
GlobalDeleteAtom
LocalReAlloc
GetThreadContext
ReadFile
EnumUILanguagesW
GetCurrentThread
UnlockFileEx
GetFileSizeEx
ReleaseMutex
UnmapViewOfFile
GetCurrentDirectoryW
SetProcessShutdownParameters
Process32NextW
SearchPathW
SetLastError
FindResourceExW
CreateSemaphoreW
SetCurrentDirectoryW
CreateToolhelp32Snapshot
Process32FirstW
GetLocaleInfoW
DisableThreadLibraryCalls
CompareStringW
SetThreadPriority
MulDiv
TerminateProcess
GetTempFileNameW
GlobalAddAtomA
CreateDirectoryW
DeleteCriticalSection
TlsAlloc
GetCurrentProcessId
LocalFree
ExpandEnvironmentStringsW
GlobalFlags
lstrcmpA
GetExitCodeThread
VirtualProtect
DeactivateActCtx
GetNumberFormatW
CompareStringA
VirtualQuery
user32
MapVirtualKeyW
SetMenuItemInfoW
GetMessageA
GetForegroundWindow
GetClipboardFormatNameW
ChangeClipboardChain
GetMenuState
MsgWaitForMultipleObjectsEx
SetPropA
GetWindowLongA
PtInRect
SendNotifyMessageW
PostMessageW
GetMonitorInfoW
SetRectEmpty
PeekMessageW
UpdateLayeredWindow
GetMenuDefaultItem
MessageBoxIndirectA
GetAsyncKeyState
EqualRect
TrackMouseEvent
DrawEdge
CharPrevA
AllowSetForegroundWindow
GetParent
DdeDisconnect
MsgWaitForMultipleObjects
DestroyIcon
TranslateMessage
MonitorFromPoint
GetKeyState
CharLowerW
EndDialog
EmptyClipboard
FindWindowExW
RemovePropW
GetClassNameW
CharPrevW
IsWindowVisible
CreateDialogParamW
DdeGetData
GetLastActivePopup
GetSystemMetrics
GetCursor
GetClassWord
SystemParametersInfoW
KillTimer
WinHelpW
UnionRect
GetPropA
CopyRect
NotifyWinEvent
CloseClipboard
DdeNameService
GetLastInputInfo
CheckMenuItem
DdeClientTransaction
EnableWindow
SetCursor
GetMenuItemInfoW
UnhookWindowsHookEx
DestroyMenu
PostMessageA
InsertMenuW
DefWindowProcA
InflateRect
BeginPaint
DdeUninitialize
IsHungAppWindow
LoadStringW
SetParent
SetDlgItemTextW
LoadCursorA
IsDialogMessageW
SystemParametersInfoA
CharNextA
DdeFreeDataHandle
GetClassInfoExW
SetRect
CopyIcon
MonitorFromRect
MessageBoxExW
CallMsgFilterW
ShowScrollBar
GetProcessWindowStation
CharNextW
DialogBoxIndirectParamW
DestroyAcceleratorTable
AdjustWindowRect
GetMessageTime
GetWindowThreadProcessId
EndDeferWindowPos
GetWindowTextW
GetWindowPlacement
DestroyWindow
DdeInitializeW
SetWindowPlacement
DdeCreateDataHandle
SetMenuItemBitmaps
GetDoubleClickTime
MessageBoxIndirectW
HideCaret
EnumWindows
AdjustWindowRectEx
PostQuitMessage
SetTimer
GetMenuItemCount
GetClassInfoW
ReleaseCapture
AnimateWindow
ClientToScreen
RemovePropA
GetWindowRgnBox
DeferWindowPos
MessageBeep
WaitMessage
GetSysColorBrush
IsChild
OffsetRect
GetDlgItem
CreateMenu
DefWindowProcW
GetWindowLongW
DeleteMenu
LoadIconW
wsprintfW
GetWindowDC
GetAncestor
ShowOwnedPopups
DdeCreateStringHandleW
SetScrollInfo
SetWindowTextW
LoadAcceleratorsW
RegisterWindowMessageW
GetSystemMenu
CheckMenuRadioItem
WaitForInputIdle
ChildWindowFromPoint
DrawIconEx
EnumDesktopWindows
MessageBoxExA
LoadStringA
GetMessageW
GetClientRect
IsIconic
TranslateAcceleratorW
LoadImageW
SetWindowRgn
GetDlgItemTextW
CallNextHookEx
LoadBitmapW
SetWindowPos
RegisterClipboardFormatA
GetDC
VkKeyScanExW
GetCapture
GetDialogBaseUnits
GetDlgCtrlID
PeekMessageA
GetScrollInfo
GetMenuItemInfoA
RedrawWindow
SetMenuDefaultItem
DialogBoxIndirectParamA
DispatchMessageA
ShowWindow
GetMenuItemID
MapWindowPoints
IsCharAlphaNumericW
GetClipboardData
TrackPopupMenu
SetWindowLongA
AppendMenuW
SetMenu
ShowCaret
UnregisterClassW
SetForegroundWindow
WindowFromPoint
SetCursorPos
GetFocus
ScreenToClient
SetFocus
GetClassLongW
EnumDisplaySettingsW
GetKeyNameTextW
AttachThreadInput
GetPropW
RegisterWindowMessageA
EndPaint
MapDialogRect
GetMessagePos
IsDlgButtonChecked
EndMenu
CheckRadioButton
CharLowerBuffW
LoadCursorW
PostThreadMessageW
MonitorFromWindow
GetNextDlgTabItem
GetIconInfo
EnableMenuItem
SetDlgItemInt
DrawTextW
CallWindowProcW
GetMenuStringW
CheckDlgButton
SendMessageW
DrawFocusRect
RegisterClipboardFormatW
EnumThreadWindows
DrawTextExW
IsWindowEnabled
SendMessageTimeoutA
SetCapture
ReleaseDC
OpenClipboard
MoveWindow
DialogBoxParamW
SendMessageTimeoutW
DdeConnect
GetActiveWindow
BeginDeferWindowPos
InvalidateRect
GetSubMenu
GetWindowInfo
GetDesktopWindow
GetWindow
SendMessageA
GetSysColor
RegisterClassW
FillRect
GetWindowTextLengthW
CreateIconIndirect
PostThreadMessageA
GetKeyboardLayout
DrawFrameControl
GetWindowRect
TrackPopupMenuEx
SetClipboardData
GetComboBoxInfo
DdeQueryStringW
EnumChildWindows
IsRectEmpty
GetShellWindow
IsWindow
GetCursorPos
CreatePopupMenu
RemoveMenu
IntersectRect
IsMenu
RegisterClassExW
DialogBoxParamA
MessageBoxW
CopyImage
CreateWindowExW
SetWindowLongW
DispatchMessageW
SetWindowsHookExW
SetPropW
InsertMenuItemW
SetScrollPos
SetActiveWindow
LockSetForegroundWindow
UpdateWindow
LoadMenuW
CharUpperW
GetTopWindow
FindWindowA
SetClipboardViewer
SendDlgItemMessageW
FindWindowW
DdeFreeStringHandle
IsWindowUnicode
advapi32
RegEnumValueA
RegSetValueExA
CryptAcquireContextW
RegEnumValueW
RegCreateKeyExW
DuplicateTokenEx
SetThreadToken
GetLengthSid
CryptDestroyHash
RegisterTraceGuidsW
RegQueryInfoKeyW
CryptHashData
OpenThreadToken
GetTraceLoggerHandle
GetUserNameW
ConvertStringSidToSidW
RegEnumKeyExW
RegCloseKey
OpenProcessToken
RegOpenKeyExA
RegOpenKeyW
RegDeleteKeyA
SetTokenInformation
TraceMessage
RegDeleteValueA
GetTokenInformation
UnregisterTraceGuids
IsTextUnicode
CryptGetHashParam
RegQueryValueExA
RegDeleteValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetTraceEnableLevel
RegOpenKeyExW
CryptReleaseContext
ConvertSidToStringSidW
CryptCreateHash
RegOpenCurrentUser
RegDeleteKeyW
ImpersonateSelf
TraceEvent
RegCreateKeyExA
RegQueryValueExW
CreateProcessAsUserW
RegQueryValueW
GetTraceEnableFlags
RegCreateKeyA
RegEnumKeyW
RegSetValueExW
gdi32
GetTextAlign
GetGlyphIndicesW
CreateCompatibleBitmap
TextOutA
GetBkColor
SaveDC
OffsetRgn
LineTo
CreateRectRgn
CreateFontW
GetTextExtentPoint32A
GetRegionData
SelectObject
SetDCPenColor
GetRgnBox
CreateCompatibleDC
RestoreDC
CreatePatternBrush
OffsetWindowOrgEx
CreateFontIndirectA
CreatePalette
CombineRgn
GetSystemPaletteEntries
GetPixel
PatBlt
SetRectRgn
GetObjectW
GetBkMode
GetLayout
CreateEnhMetaFileA
GetDCOrgEx
CreateDCA
GetClipBox
GetTextExtentPointW
CloseMetaFile
GetPaletteEntries
CreateBitmap
CreateHalftonePalette
RectVisible
GetTextMetricsW
GetStockObject
GetTextCharset
IntersectClipRect
GetDeviceCaps
StretchBlt
ExtCreateRegion
LPtoDP
DeleteDC
SetViewportExtEx
SetWindowOrgEx
SetTextColor
CreateDCW
CreatePen
PlayEnhMetaFile
RealizePalette
GetTextExtentExPointI
CreateSolidBrush
SetPaletteEntries
ExtTextOutW
SetTextAlign
GetTextColor
SetWindowExtEx
DeleteEnhMetaFile
DeleteObject
SetMapMode
SetBkColor
SelectPalette
CloseEnhMetaFile
CreateRectRgnIndirect
CreateMetaFileW
TextOutW
StretchDIBits
GetTextExtentPoint32W
SetViewportOrgEx
CreateDIBSection
CreatePolygonRgn
CreateFontIndirectW
SetLayout
GetBrushOrgEx
MoveToEx
BitBlt
EqualRgn
Rectangle
SetBrushOrgEx
GetDIBits
GetObjectA
CreateDIBPatternBrushPt
SetBkMode
SetStretchBltMode
psapi
GetProcessImageFileNameW
ntdll
RtlUshortByteSwap
LdrGetDllHandle
NtAllocateVirtualMemory
Sections
.text Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE