Static task
static1
Behavioral task
behavioral1
Sample
2383c71d991934631cf5981a129f6f00_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2383c71d991934631cf5981a129f6f00_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
2383c71d991934631cf5981a129f6f00_JaffaCakes118
-
Size
1.1MB
-
MD5
2383c71d991934631cf5981a129f6f00
-
SHA1
ee63754da34a9f3e23187360012645a20907a132
-
SHA256
d3c20cb3a58266cff82a96e8a0422e50a105ae9d7735799cb632749d0f146a93
-
SHA512
16caf9e1add8e73bf8e7e1b9c62805651f5aacec3d51f6ea523c2e6927495db839e89d19b52a12822ba9b7c195620e7fcfe20d2413d5163ead36e9ac952c0bf0
-
SSDEEP
12288:pJ9zbwF1QzuLVfH6loETWbjbUdYBFCYXrA0MQB88HYKY:T9fwvQzgH6lHTWbjbQYBLbMQB88
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2383c71d991934631cf5981a129f6f00_JaffaCakes118
Files
-
2383c71d991934631cf5981a129f6f00_JaffaCakes118.exe windows:4 windows x86 arch:x86
08ad28886d7744058c7a38abd22c01cc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msimg32
TransparentBlt
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
kernel32
WritePrivateProfileStringW
SetErrorMode
FileTimeToSystemTime
FileTimeToLocalFileTime
GetStartupInfoW
ExitProcess
RtlUnwind
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RaiseException
SetStdHandle
GetFileType
TerminateProcess
HeapReAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetLocaleInfoW
GetProfileStringA
GetFileTime
GetFileSize
GetFileAttributesW
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
SizeofResource
GlobalFlags
lstrcmpiW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileW
GetCurrentProcess
DuplicateHandle
lstrcpynW
lstrcmpW
GlobalAlloc
lstrcmpiA
GetCurrentThread
MulDiv
lstrcmpA
LocalFree
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
LoadLibraryA
lstrlenA
MultiByteToWideChar
GetVersion
lstrcatW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrcpyW
GetModuleHandleW
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceW
LoadResource
CreateFileMappingW
FindResourceA
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
CloseHandle
lstrlenW
GetLastError
SetLastError
GetPrivateProfileIntW
GetPrivateProfileStringW
GetTickCount
Sleep
FreeLibrary
LoadLibraryW
GetProcAddress
GetModuleFileNameW
GlobalAddAtomA
SetHandleCount
user32
MapWindowPoints
SendDlgItemMessageA
SendDlgItemMessageW
UpdateWindow
IsDialogMessageW
SetWindowTextW
MoveWindow
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuW
GetMenuState
GetMenuCheckMarkDimensions
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutW
DrawTextW
GrayStringW
PostQuitMessage
SetCursor
ValidateRect
TranslateMessage
GetMessageW
DestroyMenu
InflateRect
CharUpperW
GetClassNameW
LoadCursorW
LoadStringW
CopyRect
IsWindowVisible
GetTopWindow
GetCapture
WinHelpW
GetClassInfoW
RegisterClassW
GetMenuItemCount
GetSubMenu
PeekMessageW
TrackPopupMenu
GetWindowTextLengthW
GetWindowTextW
GetDlgCtrlID
GetKeyState
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
GetWindow
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoW
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetParent
GetWindowLongW
GetDlgItem
PtInRect
IsWindow
IsWindowEnabled
ShowWindow
ScreenToClient
BringWindowToTop
GetDesktopWindow
EnableMenuItem
DeleteMenu
GetCursorPos
SetForegroundWindow
IsIconic
GetSystemMetrics
DrawIcon
InvalidateRect
SetWindowRgn
CreatePopupMenu
AppendMenuW
SetMenuDefaultItem
InsertMenuW
SendMessageW
LoadIconW
LoadImageW
RegisterWindowMessageW
GetClientRect
KillTimer
UnregisterClassW
GetWindowTextLengthA
HideCaret
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
PostMessageW
FindWindowExW
GetWindowRect
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
SetTimer
LoadBitmapW
DispatchMessageW
GetFocus
SetFocus
AdjustWindowRectEx
GetMenuItemID
MessageBoxW
wsprintfW
DrawTextA
DrawFocusRect
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
EnableWindow
GetMenu
gdi32
DPtoLP
BitBlt
GetStockObject
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
DeleteDC
SaveDC
RestoreDC
SelectObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
MoveToEx
LineTo
CreateRoundRectRgn
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
PatBlt
CreatePen
CreateSolidBrush
Rectangle
CreateFontW
GetTextExtentPoint32W
CreateCompatibleDC
ExtTextOutA
GetTextExtentPointA
GetObjectW
CreateDIBitmap
GetBitmapBits
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
advapi32
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
shell32
Shell_NotifyIconW
comctl32
ord17
wsock32
WSAStartup
WSACleanup
Sections
.text Size: 152KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 836KB - Virtual size: 834KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ