Static task
static1
Behavioral task
behavioral1
Sample
2d275d7506d548b1bfeedb979daa0c6e_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2d275d7506d548b1bfeedb979daa0c6e_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2d275d7506d548b1bfeedb979daa0c6e_JaffaCakes118
-
Size
644KB
-
MD5
2d275d7506d548b1bfeedb979daa0c6e
-
SHA1
00f4ab8acc284756b00cc2cdaca87150e986bda7
-
SHA256
f9eabcb6ae9fd2d67a292ea65f9749473b350b75234788a0ed3ffe34b3f799b5
-
SHA512
68fad58eb3696d1edf9cc31d79ffd94de68c5bdeb26c1349930240cc3db9c5544ed00882d26286b2add1e9d23c17db03dad799142e72dd355b3d46778a662e9f
-
SSDEEP
6144:b3m990a3eWvrfV5iQaaaXM616LKtgYkuGUQT+MGw9nglQQbDkQdvOUvGc4GTtwHF:8RGaaXMhvuGUyNGwxglQcdv7ywuYoe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2d275d7506d548b1bfeedb979daa0c6e_JaffaCakes118
Files
-
2d275d7506d548b1bfeedb979daa0c6e_JaffaCakes118.exe windows:4 windows x86 arch:x86
4984cfdf7b97c073f2312e58bc7adf74
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
IsBadReadPtr
GetProfileStringA
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetACP
HeapSize
GetTimeZoneInformation
HeapReAlloc
TerminateProcess
RaiseException
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapFree
RtlUnwind
SetErrorMode
GetFileTime
GetFileSize
GetFileAttributesA
GetOEMCP
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
SizeofResource
GlobalFlags
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentThread
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
GetLastError
GetModuleFileNameA
SetLastError
GetPrivateProfileStringA
GetPrivateProfileIntA
FormatMessageA
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
lstrcpynA
lstrcmpA
GetSystemTime
WriteProfileStringA
GetProfileIntA
LocalAlloc
LocalFree
Sleep
GetCurrentDirectoryA
SetEndOfFile
SetFilePointer
ReadFile
GetTempPathA
GetTempFileNameA
WritePrivateProfileStringA
lstrcatA
WinExec
GetWindowsDirectoryA
lstrcpyA
LoadLibraryA
GetProcAddress
FreeLibrary
MulDiv
CreateFileA
WriteFile
CloseHandle
lstrcmpiA
FindResourceA
LoadResource
LockResource
GetCPInfo
lstrlenW
lstrlenA
GetTickCount
GetVersion
GetVersionExA
SetStdHandle
user32
CheckDlgButton
SendDlgItemMessageA
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
IsWindowVisible
GetScrollInfo
SetScrollInfo
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
IntersectRect
GetWindowPlacement
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsRectEmpty
GetClipboardData
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
IsWindowEnabled
SetFocus
RegisterWindowMessageA
EnableMenuItem
GetCursorPos
ReleaseCapture
UpdateWindow
SetCapture
PeekMessageA
TranslateMessage
DispatchMessageA
GetFocus
IsIconic
GetSystemMenu
LoadIconA
LoadCursorA
CopyIcon
GetMessagePos
ScreenToClient
PtInRect
SetTimer
MessageBeep
SetWindowLongA
KillTimer
GetKeyState
RedrawWindow
GetDlgItem
IsWindow
FrameRect
LoadImageA
GetIconInfo
CreateIconIndirect
DrawStateA
OffsetRect
GetClientRect
EnableWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
GetMenuItemInfoA
InflateRect
DrawFocusRect
GetWindowRect
PostMessageA
ClientToScreen
WindowFromPoint
GetActiveWindow
InvalidateRect
SetCursor
GetParent
GetNextDlgTabItem
IsMenu
SendMessageA
PostThreadMessageA
RegisterClipboardFormatA
SetParent
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
LockWindowUpdate
GetDCEx
IsClipboardFormatAvailable
GetWindowLongA
DestroyCursor
GetMenuStringA
GetSubMenu
GrayStringA
TabbedTextOutA
LoadBitmapA
GetSysColorBrush
CreateMenu
CreatePopupMenu
GetMenuItemID
GetMenuState
ModifyMenuA
GetMenuItemCount
AppendMenuA
GetSystemMetrics
GetDesktopWindow
GetDC
DrawTextA
ReleaseDC
DrawIconEx
DestroyIcon
SystemParametersInfoA
GetSysColor
CopyRect
FillRect
DrawEdge
SetRect
GetClassNameA
IsZoomed
SetWindowContextHelpId
PostQuitMessage
CharUpperA
MapDialogRect
LoadStringA
SetRectEmpty
GetMessageA
ValidateRect
EndPaint
BeginPaint
GetWindowDC
DestroyMenu
wvsprintfA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
DrawIcon
MapWindowPoints
gdi32
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
GetViewportExtEx
GetWindowExtEx
CreatePatternBrush
SetRectRgn
CombineRgn
DPtoLP
StretchDIBits
GetCharWidthA
CreateFontA
GetTextMetricsA
GetTextColor
LPtoDP
SetBkMode
RestoreDC
SaveDC
GetClipBox
GetMapMode
CreateRectRgn
GetBkColor
GetCurrentObject
RoundRect
CreateRectRgnIndirect
CreateBitmap
SetBkColor
SetTextColor
GetStockObject
Rectangle
Escape
ExtTextOutA
TextOutA
PatBlt
RectVisible
PtVisible
GetObjectA
GetPixel
SetPixel
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
Ellipse
GetTextExtentPoint32A
GetTextExtentPoint32W
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontIndirectA
CreateSolidBrush
CreatePen
GetBkMode
CreateDIBitmap
GetTextExtentPointA
GetDeviceCaps
comdlg32
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegCloseKey
RegOpenKeyExA
RegOpenKeyA
RegQueryValueA
RegSetValueExA
RegCreateKeyA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA
shell32
DragAcceptFiles
DragQueryFileA
DragFinish
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
ShellExecuteA
ShellExecuteExA
comctl32
ord17
ImageList_GetImageInfo
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_DragEnter
ImageList_DragLeave
ImageList_EndDrag
ImageList_DragMove
ImageList_BeginDrag
_TrackMouseEvent
ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_GetIcon
ImageList_GetImageCount
ImageList_Draw
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_DrawIndirect
ImageList_DragShowNolock
oledlg
ord8
ole32
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
olepro32
ord253
oleaut32
SysFreeString
SysAllocStringLen
VariantClear
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
VariantTimeToSystemTime
SysStringLen
Sections
.text Size: 344KB - Virtual size: 341KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 180KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ