Static task
static1
Behavioral task
behavioral1
Sample
27bb8d0d98350bfb8e4cb6cf35da259a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
27bb8d0d98350bfb8e4cb6cf35da259a_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
27bb8d0d98350bfb8e4cb6cf35da259a_JaffaCakes118
-
Size
512KB
-
MD5
27bb8d0d98350bfb8e4cb6cf35da259a
-
SHA1
fa09163b1c3c460d11621f2b3ae3c47ab18bafc5
-
SHA256
3707554b4417bf6e0d418c8ef48c5d0a867473f9fa3b2ea6c952ce7e728266fc
-
SHA512
900d43219e026859e836495dd10574766652080f2372b616d704fb3bf0d4e4705fc56253b84f449fbd7e9d35b0789ed1be694cb86e2ba74e3b985884a5e02824
-
SSDEEP
6144:ii0sBv8YTdBhCVreAthqho633XKKC3iB1TKqkGDyHYJg61B9U6OWEWrifgmJXR7:CsF8Qh+eAthqhosqAB1T8ipJX06un
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 27bb8d0d98350bfb8e4cb6cf35da259a_JaffaCakes118
Files
-
27bb8d0d98350bfb8e4cb6cf35da259a_JaffaCakes118.exe windows:4 windows x86 arch:x86
cfc418d461672e741d722f9bab6896f9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleCP
DebugBreak
TlsSetValue
SetConsoleTitleA
BuildCommDCBW
SetLastError
GetTapeParameters
SetFileApisToANSI
CreateIoCompletionPort
GetCommandLineA
GetModuleHandleA
GetThreadTimes
GetStartupInfoA
GetTapeStatus
MultiByteToWideChar
GetConsoleTitleA
WriteConsoleOutputCharacterW
FillConsoleOutputCharacterW
MapViewOfFile
GetCalendarInfoA
FindAtomA
GetConsoleScreenBufferInfo
CompareFileTime
SetFileAttributesW
WriteConsoleInputW
lstrcpynA
CreateFileMappingA
VerLanguageNameA
HeapReAlloc
GetFileTime
SetSystemPowerState
FormatMessageA
WriteTapemark
CreateDirectoryA
DosDateTimeToFileTime
LocalAlloc
OpenFileMappingW
LocalSize
HeapLock
FillConsoleOutputCharacterA
ReadConsoleInputW
GetFileAttributesExW
PulseEvent
GlobalHandle
SetHandleInformation
FindFirstFileA
GetTimeFormatW
BuildCommDCBAndTimeoutsW
GetPrivateProfileStructW
DeleteAtom
GetLogicalDriveStringsW
GlobalAddAtomA
SetTapeParameters
GetDiskFreeSpaceA
CreateProcessA
SetFileAttributesA
Module32Next
SetProcessPriorityBoost
OpenFile
_llseek
GetProcessPriorityBoost
GetThreadPriorityBoost
WritePrivateProfileStringA
MulDiv
IsValidCodePage
EnumSystemCodePagesW
SetFileTime
EndUpdateResourceA
GetFileInformationByHandle
GetCPInfo
lstrlenA
OpenEventA
GetFileAttributesExA
LocalReAlloc
GetSystemDirectoryW
MoveFileExW
SetConsoleTitleW
IsBadCodePtr
TlsGetValue
CreateMutexW
SetCurrentDirectoryA
SetHandleCount
CompareStringW
SetCommBreak
SetProcessAffinityMask
SleepEx
GetBinaryTypeW
VirtualUnlock
GetLocalTime
GetProcessHeap
lstrcpyW
SetMessageWaitingIndicator
GetNamedPipeInfo
LockResource
LockFileEx
lstrlenW
ScrollConsoleScreenBufferW
DuplicateHandle
RemoveDirectoryW
GetVersion
HeapWalk
Thread32First
EnumTimeFormatsA
InitAtomTable
PostQueuedCompletionStatus
GetWindowsDirectoryA
EnumDateFormatsW
GetTimeFormatA
_lcreat
GetHandleInformation
OpenMutexW
GetMailslotInfo
Sleep
GetProfileIntW
EndUpdateResourceW
GlobalGetAtomNameW
WideCharToMultiByte
GetFullPathNameW
GetDateFormatA
SetConsoleCtrlHandler
ReadConsoleOutputA
CreateRemoteThread
LoadLibraryExA
FreeConsole
FoldStringW
CreateNamedPipeA
SetEnvironmentVariableW
GetLogicalDrives
SetDefaultCommConfigW
GetPriorityClass
QueryDosDeviceW
ReadFile
GetCompressedFileSizeA
GetEnvironmentVariableA
LoadLibraryA
lstrcatA
ClearCommError
SetLocaleInfoA
OpenSemaphoreA
UnmapViewOfFile
ReadConsoleInputA
CreateProcessW
FindCloseChangeNotification
SetCommConfig
FlushFileBuffers
SetCommTimeouts
HeapAlloc
GlobalGetAtomNameA
SetCalendarInfoW
GetLastError
GetACP
GetLargestConsoleWindowSize
GlobalLock
GetConsoleOutputCP
VirtualFree
GetDriveTypeA
ContinueDebugEvent
CreateSemaphoreW
GetDefaultCommConfigA
GetCalendarInfoW
FreeResource
ResetWriteWatch
ClearCommBreak
GetTickCount
_lclose
GetVersionExW
GlobalReAlloc
GlobalFlags
SetConsoleOutputCP
ScrollConsoleScreenBufferA
SetSystemTime
QueryDosDeviceA
lstrcmpA
LocalLock
CreateFileMappingW
BeginUpdateResourceW
PeekConsoleInputA
BackupWrite
GetTimeZoneInformation
Process32First
SetStdHandle
HeapUnlock
ExpandEnvironmentStringsA
GetProcessHeaps
LoadLibraryW
GetOverlappedResult
GetVersionExA
EnumSystemLocalesW
GetProcessWorkingSetSize
GlobalFree
EraseTape
MoveFileExA
SetVolumeLabelW
WaitNamedPipeW
GetCommMask
RequestDeviceWakeup
CreateNamedPipeW
FreeEnvironmentStringsA
Heap32ListFirst
RequestWakeupLatency
HeapFree
AddAtomW
PrepareTape
AddAtomA
GetEnvironmentStrings
SetErrorMode
SetThreadPriorityBoost
GetVolumeInformationA
EnumCalendarInfoW
ReadFileEx
GetCurrencyFormatW
SetLocaleInfoW
WaitCommEvent
GetThreadContext
GlobalSize
GetFileAttributesA
GetTempFileNameA
GetTempPathA
LoadModule
GetDiskFreeSpaceW
IsProcessorFeaturePresent
CreatePipe
LocalCompact
OutputDebugStringW
EnumSystemLocalesA
ExitProcess
GetComputerNameA
GlobalUnlock
GetCurrentThreadId
GetProfileStringW
GetConsoleCursorInfo
GetDevicePowerState
GetLongPathNameW
GetCurrentProcess
EnumResourceTypesW
GetCurrentDirectoryW
GetNumberFormatA
TlsAlloc
GetPrivateProfileStringW
WaitForMultipleObjects
GetNumberOfConsoleInputEvents
IsBadStringPtrW
VirtualAllocEx
GetLocaleInfoW
GetCommState
GetCommConfig
DeleteFileA
WriteConsoleOutputCharacterA
GlobalUnWire
LocalUnlock
FindResourceA
ReadConsoleOutputAttribute
user32
GetClassLongW
SystemParametersInfoW
GetSysColorBrush
EndPaint
CascadeWindows
SetMessageQueue
RegisterClipboardFormatA
UnionRect
MapVirtualKeyExA
MapDialogRect
BringWindowToTop
CharNextA
DefWindowProcW
MessageBoxIndirectA
GetUserObjectSecurity
DispatchMessageW
GetKeyboardLayoutList
SendNotifyMessageW
GetSubMenu
GetMessageTime
wsprintfW
ExitWindowsEx
LoadCursorFromFileW
AnyPopup
ClipCursor
GetScrollPos
ValidateRgn
GetClipboardFormatNameW
SetPropW
SendMessageCallbackA
GetKeyboardLayoutNameA
CreateMDIWindowW
CharToOemA
PostMessageA
FrameRect
ShowCursor
OpenIcon
CloseWindow
CharPrevA
GetActiveWindow
InsertMenuW
EndDialog
CheckRadioButton
CloseDesktop
OpenDesktopA
CheckMenuItem
DlgDirListW
LoadStringA
DrawMenuBar
GetWindowRect
MessageBoxExW
GetWindowTextW
DlgDirListA
GetClassWord
SetDlgItemTextA
MessageBoxA
SetClassLongA
GetNextDlgGroupItem
CharUpperBuffW
RegisterClassA
SetParent
GetWindowThreadProcessId
EnumDesktopsA
SetClipboardViewer
GetWindowTextLengthA
GetShellWindow
SwitchDesktop
SendMessageTimeoutW
MessageBoxExA
GetProcessWindowStation
CreateDialogIndirectParamA
SetRect
GetWindow
GetWindowPlacement
GrayStringW
GetDlgItemTextW
ModifyMenuW
GetCaretPos
ChangeClipboardChain
GetKeyboardState
MenuItemFromPoint
PaintDesktop
DrawStateW
EnableMenuItem
GetKeyboardLayout
SetDlgItemInt
CloseClipboard
CharLowerBuffW
GetWindowWord
KillTimer
GetMenuState
SetWindowLongA
GetDlgItemTextA
GetTabbedTextExtentW
LoadKeyboardLayoutA
ActivateKeyboardLayout
SetWindowsHookW
CreateDialogParamA
DefMDIChildProcA
DlgDirSelectComboBoxExA
DispatchMessageA
wvsprintfA
RegisterHotKey
WinHelpA
GetKeyState
ExcludeUpdateRgn
DestroyCursor
CreateCaret
LoadBitmapW
GetClassNameW
VkKeyScanW
InsertMenuItemW
TileWindows
DeleteMenu
OpenWindowStationW
ChangeDisplaySettingsExW
IsDialogMessageA
GetMenuCheckMarkDimensions
SetWindowsHookA
MsgWaitForMultipleObjects
GetDlgItemInt
GetMenuDefaultItem
MoveWindow
IsRectEmpty
PostThreadMessageW
ChangeMenuW
SetRectEmpty
IsMenu
EnumWindowStationsA
SetUserObjectSecurity
ArrangeIconicWindows
OemToCharW
ShowWindowAsync
GetDlgCtrlID
InternalGetWindowText
CountClipboardFormats
GetPropA
CreateIconFromResource
GetClassInfoExW
DlgDirSelectExW
LookupIconIdFromDirectoryEx
FillRect
CallWindowProcA
GetMenuStringW
LoadAcceleratorsW
SetClipboardData
ToAsciiEx
SendMessageCallbackW
InflateRect
GetCapture
LockWindowUpdate
GetWindowLongW
DrawAnimatedRects
CharToOemBuffA
ShowOwnedPopups
SetScrollRange
GetClassInfoExA
IsWindow
MapWindowPoints
ScrollWindowEx
WindowFromPoint
GetOpenClipboardWindow
GetClipboardViewer
WaitForInputIdle
GetIconInfo
SendMessageW
WaitMessage
IsCharLowerW
IsDlgButtonChecked
GetParent
SetScrollInfo
DestroyWindow
LoadMenuIndirectW
GetKeyboardLayoutNameW
ReleaseCapture
OemToCharBuffA
FindWindowA
OffsetRect
DlgDirListComboBoxW
SetMenu
CharLowerBuffA
TabbedTextOutW
GetTabbedTextExtentA
SetUserObjectInformationA
RemovePropA
GetDoubleClickTime
ChangeDisplaySettingsW
EnumPropsExW
EnableScrollBar
AdjustWindowRect
SetMenuItemInfoW
GetPropW
FindWindowExW
VkKeyScanExA
CopyImage
GetMenuItemInfoW
CharNextExA
GrayStringA
CharPrevExA
CreateWindowStationW
CreateDialogParamW
GetDCEx
CreateDesktopW
DeferWindowPos
LoadIconA
CallMsgFilterW
MessageBoxIndirectW
DrawCaption
SetCaretPos
RegisterWindowMessageW
DragObject
DefDlgProcW
SetCursorPos
PeekMessageA
LoadBitmapA
IsWindowUnicode
GetUserObjectInformationA
MapVirtualKeyW
DragDetect
ChangeMenuA
gdi32
Ellipse
GetOutlineTextMetricsA
SetPixel
PolyBezier
SetDIBColorTable
CancelDC
CreateICA
CreateScalableFontResourceA
GetDeviceGammaRamp
AbortDoc
CopyMetaFileA
CreatePolygonRgn
PolyTextOutW
CreateHatchBrush
GetPolyFillMode
GetViewportExtEx
GetDIBColorTable
OffsetWindowOrgEx
PolyDraw
SetColorAdjustment
BitBlt
EnumICMProfilesA
GetBkColor
GetCharWidth32A
SetWorldTransform
GetTextExtentExPointA
SetPolyFillMode
SetBitmapBits
CreatePalette
GetCharWidthW
StretchBlt
StartPage
GetCharABCWidthsFloatW
BeginPath
CreateCompatibleBitmap
PolyTextOutA
GetBitmapBits
GetAspectRatioFilterEx
IntersectClipRect
CreateRectRgn
SetMapperFlags
SetDeviceGammaRamp
CombineTransform
GetWorldTransform
CreateCompatibleDC
SetTextCharacterExtra
GetCharWidthFloatW
PolyPolyline
CreateSolidBrush
SwapBuffers
StrokeAndFillPath
DeleteColorSpace
CreatePenIndirect
OffsetViewportOrgEx
GetCharABCWidthsFloatA
MoveToEx
GetCharacterPlacementW
CreateEllipticRgnIndirect
GetTextMetricsW
GetCurrentObject
GetKerningPairsW
GetGlyphOutlineW
CreateMetaFileA
CloseFigure
SetArcDirection
AddFontResourceA
SetDIBitsToDevice
CreateDIBPatternBrushPt
GetGlyphOutlineA
CreateRectRgnIndirect
CreateRoundRectRgn
EnumObjects
GetTextCharset
SetWindowOrgEx
LineTo
GetTextCharacterExtra
GetCharacterPlacementA
SetTextAlign
PaintRgn
SetICMProfileA
SelectObject
GetViewportOrgEx
GdiSetBatchLimit
GetICMProfileW
CombineRgn
CreatePen
SetViewportOrgEx
ExtCreateRegion
Rectangle
DeleteDC
RealizePalette
EnumFontsA
CreateEnhMetaFileA
GetDCOrgEx
GetPaletteEntries
GetMetaFileW
GetEnhMetaFileW
GetMetaFileA
SetTextColor
CreateICW
EnumFontFamiliesW
SetRectRgn
GetRandomRgn
PtInRegion
SetStretchBltMode
EnumFontFamiliesExW
ResetDCW
RectVisible
SetPixelV
FrameRgn
SetBitmapDimensionEx
EndPath
TextOutA
GetPixel
GetBrushOrgEx
GetWindowExtEx
EnumFontsW
GetPath
GetClipRgn
SetTextJustification
GdiGetBatchLimit
SelectClipRgn
GetCharWidthFloatA
CreateDIBSection
GetEnhMetaFileDescriptionA
RemoveFontResourceA
SetPixelFormat
CreateEllipticRgn
EnumFontFamiliesA
GetCharABCWidthsW
GetCurrentPositionEx
SaveDC
ResizePalette
CloseEnhMetaFile
CopyMetaFileW
GetEnhMetaFilePaletteEntries
AddFontResourceW
GetColorAdjustment
StretchDIBits
GetTextExtentPoint32W
EnumFontFamiliesExA
ChoosePixelFormat
UnrealizeObject
SetMetaRgn
GetEnhMetaFileHeader
comdlg32
PrintDlgA
GetSaveFileNameW
PageSetupDlgW
GetFileTitleW
ReplaceTextA
PageSetupDlgA
GetSaveFileNameA
advapi32
GetTokenInformation
CryptSignHashW
RegLoadKeyW
NotifyChangeEventLog
CreateProcessAsUserW
CreateServiceW
ObjectDeleteAuditAlarmW
CryptExportKey
GetMultipleTrusteeA
CryptGetDefaultProviderW
OpenBackupEventLogW
CryptCreateHash
EnumDependentServicesA
RegCloseKey
UnlockServiceDatabase
RegRestoreKeyA
RegQueryMultipleValuesA
LookupPrivilegeValueW
InitializeAcl
AdjustTokenPrivileges
GetServiceKeyNameA
SetPrivateObjectSecurity
GetSecurityInfo
GetTrusteeNameA
InitiateSystemShutdownA
RegSetValueA
GetServiceKeyNameW
CryptDuplicateKey
RegQueryValueA
GetAclInformation
CryptSetKeyParam
GetNumberOfEventLogRecords
AreAnyAccessesGranted
GetExplicitEntriesFromAclA
CryptDestroyHash
RegCreateKeyExA
AreAllAccessesGranted
GetSidIdentifierAuthority
RegisterServiceCtrlHandlerA
GetNamedSecurityInfoW
ReportEventA
RegEnumKeyExW
OpenEventLogA
ClearEventLogW
GetUserNameW
GetAuditedPermissionsFromAclA
CryptSetProviderW
EnumDependentServicesW
GetSidLengthRequired
CryptDestroyKey
EqualSid
GetServiceDisplayNameW
OpenSCManagerA
CryptDecrypt
RegCreateKeyExW
GetSidSubAuthorityCount
StartServiceA
ReadEventLogA
CryptEncrypt
RegDeleteValueA
InitializeSid
DuplicateTokenEx
SetSecurityDescriptorSacl
OpenServiceW
GetOldestEventLogRecord
GetMultipleTrusteeOperationA
GetEffectiveRightsFromAclW
CryptGenKey
RegCreateKeyW
RegQueryInfoKeyA
RegEnumKeyW
ChangeServiceConfigA
ObjectOpenAuditAlarmA
RegQueryInfoKeyW
SetSecurityDescriptorGroup
AdjustTokenGroups
ObjectOpenAuditAlarmW
BuildImpersonateExplicitAccessWithNameA
GetSecurityDescriptorLength
SetEntriesInAclA
SetSecurityInfo
EnumServicesStatusW
GetSidSubAuthority
CryptEnumProviderTypesA
SetAclInformation
OpenBackupEventLogA
CryptSetProviderA
CryptSignHashA
LookupPrivilegeValueA
CreateServiceA
ImpersonateNamedPipeClient
LogonUserA
RegUnLoadKeyA
RegFlushKey
CreatePrivateObjectSecurity
SetFileSecurityA
BuildTrusteeWithNameW
BuildExplicitAccessWithNameA
LookupAccountNameA
ReadEventLogW
SetServiceStatus
ImpersonateLoggedOnUser
CryptGetHashParam
GetSecurityDescriptorOwner
AllocateAndInitializeSid
AddAccessDeniedAce
LookupAccountNameW
EnumServicesStatusA
GetSecurityDescriptorSacl
ObjectCloseAuditAlarmA
SetKernelObjectSecurity
BackupEventLogA
RegisterEventSourceW
GetKernelObjectSecurity
OpenSCManagerW
shell32
ShellExecuteW
ShellAboutA
ExtractIconA
SHQueryRecycleBinA
SHLoadInProc
DragQueryFileW
SHGetDesktopFolder
ExtractIconExW
ExtractIconExA
FindExecutableW
Shell_NotifyIconA
SHGetPathFromIDListA
DragQueryFileA
SHAppBarMessage
SHEmptyRecycleBinA
DragAcceptFiles
ExtractAssociatedIconExW
SHEmptyRecycleBinW
DragFinish
SHBrowseForFolderA
DuplicateIcon
ExtractIconW
DoEnvironmentSubstW
SHGetSettings
SHGetPathFromIDListW
SHGetInstanceExplorer
ShellExecuteA
SHChangeNotify
SHInvokePrinterCommandA
ExtractAssociatedIconA
msvcrt
strlen
_exit
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter
Sections
.text Size: 284KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 21KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
vv94iwc3 Size: 44KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
g2v.e2zj Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ