Static task
static1
Behavioral task
behavioral1
Sample
31ed3c096bf7a2520fe25ea503aadbc9_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
31ed3c096bf7a2520fe25ea503aadbc9_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
31ed3c096bf7a2520fe25ea503aadbc9_JaffaCakes118
-
Size
42KB
-
MD5
31ed3c096bf7a2520fe25ea503aadbc9
-
SHA1
2c6c8b565e9eec3573160b8c7606ae41a9ec5dfc
-
SHA256
07b275711cbedb7ec71d9a13dc8c21f8d62177fdc1e9936542cb6542aeac8b35
-
SHA512
700a88eb4ff36d6b1b9c2847eebcb6eebc8b555f868b3deda85940b44c3f423eccbb45e8befb6f0a34c87509cd602844c54f32ccb30c460f8f514adba148ef33
-
SSDEEP
768:QmlqIYAdaFkb58ubZ+Y2nHd4sD4RIwsMkbYYhY9lvNEu9:QmakbPcYM1cLjkbYYhiPEu9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 31ed3c096bf7a2520fe25ea503aadbc9_JaffaCakes118
Files
-
31ed3c096bf7a2520fe25ea503aadbc9_JaffaCakes118.exe windows:5 windows x86 arch:x86
061205222db0931bff3abec862234c6d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileW
lstrcatW
GetWindowsDirectoryW
AddAtomW
AddConsoleAliasA
AddConsoleAliasW
AllocConsole
AreFileApisANSI
BackupRead
Beep
BeginUpdateResourceA
BuildCommDCBAndTimeoutsW
BuildCommDCBW
CancelDeviceWakeupRequest
ChangeTimerQueueTimer
CommConfigDialogA
CompareFileTime
ConvertDefaultLocale
CopyFileA
CopyFileExA
CopyFileW
CreateConsoleScreenBuffer
CreateDirectoryW
CreateEventA
CreateEventW
CreateFileA
CreateFileMappingA
CreateFileMappingW
CreateHardLinkA
CreateHardLinkW
CreateJobObjectA
CreateJobObjectW
CreateMailslotA
CreateMailslotW
CreateMutexA
CreateMutexW
CreateRemoteThread
CreateTapePartition
CreateThread
CreateTimerQueue
CreateWaitableTimerA
DebugBreak
DeleteFileA
DeleteFileW
DeleteTimerQueue
DeleteTimerQueueEx
DeleteVolumeMountPointA
DisableThreadLibraryCalls
DisconnectNamedPipe
DnsHostnameToComputerNameA
EndUpdateResourceA
EnumDateFormatsExA
EnumDateFormatsW
EnumLanguageGroupLocalesW
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
EnumSystemCodePagesA
EnumSystemLanguageGroupsA
EnumSystemLanguageGroupsW
EnumSystemLocalesA
EnumSystemLocalesW
EnumTimeFormatsA
EnumUILanguagesA
EscapeCommFunction
ExitThread
ExpandEnvironmentStringsA
FatalAppExitW
FatalExit
FileTimeToDosDateTime
FillConsoleOutputCharacterW
FindAtomA
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationA
FindFirstFileA
FindFirstFileExA
FindFirstFileW
FindFirstVolumeA
FindFirstVolumeMountPointA
FindFirstVolumeMountPointW
FindNextChangeNotification
FindNextFileW
FindNextVolumeW
FindResourceA
FindResourceExA
FindResourceExW
FindVolumeMountPointClose
FlushConsoleInputBuffer
FlushFileBuffers
FlushViewOfFile
FoldStringW
FreeConsole
FreeLibraryAndExitThread
FreeResource
GenerateConsoleCtrlEvent
GetBinaryType
GetBinaryTypeA
GetCPInfo
GetCPInfoExA
GetCPInfoExW
GetCalendarInfoA
GetCalendarInfoW
GetCommConfig
GetCommandLineA
GetCommandLineW
GetCompressedFileSizeA
GetCompressedFileSizeW
GetComputerNameExW
GetConsoleAliasExesLengthA
GetConsoleAliasExesLengthW
GetConsoleAliasW
GetConsoleAliasesLengthA
GetConsoleAliasesW
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetConsoleTitleA
GetConsoleTitleW
GetConsoleWindow
GetCurrencyFormatA
GetCurrentDirectoryA
GetCurrentThreadId
GetDateFormatA
GetDateFormatW
GetDefaultCommConfigA
GetDevicePowerState
GetDiskFreeSpaceExW
GetEnvironmentStrings
GetEnvironmentStringsW
GetExitCodeProcess
GetExitCodeThread
GetFileAttributesA
GetFileAttributesExA
GetFileAttributesExW
GetFileSizeEx
GetFileTime
GetFileType
GetFullPathNameA
GetLogicalDriveStringsW
GetLongPathNameA
GetLongPathNameW
GetModuleFileNameA
GetModuleHandleA
GetModuleHandleW
GetNamedPipeHandleStateW
GetNumberFormatW
GetNumberOfConsoleInputEvents
GetPriorityClass
GetPrivateProfileIntA
GetPrivateProfileSectionA
GetPrivateProfileSectionW
GetPrivateProfileStringW
GetPrivateProfileStructA
GetProcessTimes
GetProcessWorkingSetSize
GetProfileIntA
GetProfileSectionA
GetProfileStringA
GetQueuedCompletionStatus
GetShortPathNameA
GetShortPathNameW
GetStartupInfoA
GetStartupInfoW
GetStringTypeExA
GetStringTypeW
GetSystemDefaultLangID
GetSystemDefaultUILanguage
GetSystemDirectoryA
GetSystemPowerStatus
GetSystemTimeAdjustment
GetSystemWindowsDirectoryA
GetSystemWindowsDirectoryW
GetTapeParameters
GetTapePosition
GetTapeStatus
GetTempFileNameW
GetTempPathA
GetTempPathW
GetThreadContext
GetThreadLocale
GetThreadPriorityBoost
GetThreadSelectorEntry
GetTimeFormatW
GetUserDefaultLangID
CloseHandle
GetVersionExA
GetVersionExW
GetVolumeNameForVolumeMountPointW
GetWindowsDirectoryA
GetWriteWatch
GlobalAddAtomW
GlobalCompact
GlobalFindAtomA
GlobalGetAtomNameA
GlobalGetAtomNameW
GlobalLock
GlobalUnWire
GlobalUnlock
Heap32Next
HeapCreate
HeapDestroy
HeapSize
HeapUnlock
HeapValidate
HeapWalk
InitAtomTable
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
IsBadCodePtr
IsBadHugeWritePtr
IsBadReadPtr
IsBadStringPtrA
IsBadWritePtr
IsDBCSLeadByteEx
IsDebuggerPresent
IsProcessorFeaturePresent
IsSystemResumeAutomatic
IsValidCodePage
LCMapStringW
LoadLibraryA
LoadLibraryExA
LoadResource
LocalAlloc
LocalFlags
LocalHandle
LocalLock
LocalShrink
LocalUnlock
LockResource
MapUserPhysicalPagesScatter
MapViewOfFile
MapViewOfFileEx
Module32Next
Module32NextW
MoveFileA
MoveFileW
MulDiv
MultiByteToWideChar
OpenEventW
OpenFile
OpenFileMappingA
OpenFileMappingW
OpenJobObjectW
OpenMutexA
OpenSemaphoreA
OutputDebugStringA
OutputDebugStringW
PeekConsoleInputA
PostQueuedCompletionStatus
ProcessIdToSessionId
QueryInformationJobObject
QueryPerformanceFrequency
QueueUserAPC
RaiseException
ReadConsoleInputA
ReadConsoleOutputAttribute
ReadConsoleOutputCharacterA
ReadConsoleOutputW
ReadConsoleW
ReadFileEx
ReadFileScatter
RemoveDirectoryA
RemoveDirectoryW
ReplaceFileA
ReplaceFileW
RequestDeviceWakeup
ResetEvent
RtlMoveMemory
RtlUnwind
RtlZeroMemory
SearchPathW
SetCommBreak
SetCommMask
SetCommState
SetComputerNameExA
SetConsoleActiveScreenBuffer
SetConsoleCtrlHandler
SetConsoleCursor
SetConsoleCursorPosition
SetConsoleMode
SetConsoleScreenBufferSize
SetConsoleTitleA
SetCurrentDirectoryA
SetDefaultCommConfigA
SetDefaultCommConfigW
SetEndOfFile
SetEnvironmentVariableA
SetEvent
SetFileApisToANSI
SetFileAttributesA
SetFileAttributesW
SetFilePointer
SetFileTime
SetHandleCount
SetLocalTime
SetLocaleInfoA
SetLocaleInfoW
SetNamedPipeHandleState
SetStdHandle
SetSystemTimeAdjustment
SetTapePosition
SetThreadExecutionState
SetThreadIdealProcessor
SetThreadLocale
SetUnhandledExceptionFilter
SetVolumeMountPointA
SetWaitableTimer
SetupComm
SignalObjectAndWait
SleepEx
SwitchToFiber
SwitchToThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
Thread32First
Toolhelp32ReadProcessMemory
TransactNamedPipe
TransmitCommChar
TryEnterCriticalSection
UnhandledExceptionFilter
UnlockFile
UnlockFileEx
UpdateResourceA
UpdateResourceW
VerifyVersionInfoA
VerifyVersionInfoW
VirtualAllocEx
VirtualFree
VirtualLock
VirtualProtect
VirtualProtectEx
VirtualQuery
WaitCommEvent
WaitForDebugEvent
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WaitNamedPipeW
WideCharToMultiByte
WinExec
WriteConsoleA
WriteConsoleInputA
WriteConsoleInputW
WriteConsoleOutputAttribute
WriteConsoleOutputCharacterA
WriteConsoleOutputCharacterW
WriteConsoleOutputW
WriteFileEx
WritePrivateProfileSectionW
WritePrivateProfileStringA
WriteProcessMemory
WriteProfileStringA
_lclose
_llseek
_lwrite
lstrcat
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpy
lstrcpyA
lstrcpyW
lstrcpyn
lstrlenA
GetUserDefaultUILanguage
VirtualAlloc
msvcrt
memcpy
memset
user32
AdjustWindowRectEx
AllowSetForegroundWindow
ArrangeIconicWindows
AttachThreadInput
BlockInput
BringWindowToTop
BroadcastSystemMessage
BroadcastSystemMessageA
BroadcastSystemMessageW
CallMsgFilterW
CallNextHookEx
CallWindowProcA
CascadeChildWindows
CascadeWindows
ChangeDisplaySettingsExW
ChangeMenuA
CharLowerA
CharLowerBuffA
CharLowerBuffW
CharNextW
CharPrevExA
CharToOemBuffA
CharUpperA
CharUpperBuffW
CharUpperW
CheckMenuRadioItem
ChildWindowFromPointEx
ClipCursor
CloseClipboard
CloseDesktop
CloseWindowStation
CopyAcceleratorTableA
CopyAcceleratorTableW
CopyRect
CreateAcceleratorTableA
CreateAcceleratorTableW
CreateCaret
CreateDesktopW
CreateDialogIndirectParamA
CreateDialogIndirectParamW
CreateDialogParamA
CreateDialogParamW
CreateIcon
CreateMDIWindowW
CreateMenu
CreatePopupMenu
CreateWindowStationA
CreateWindowStationW
DdeAbandonTransaction
DdeCmpStringHandles
DdeConnect
DdeCreateDataHandle
DdeCreateStringHandleW
DdeFreeDataHandle
DdeGetLastError
DdeInitializeA
DdeNameService
DdeQueryConvInfo
DdeQueryNextServer
DdeQueryStringW
DdeSetUserHandle
DefMDIChildProcW
DestroyAcceleratorTable
DestroyCaret
DialogBoxParamA
DialogBoxParamW
DispatchMessageA
DlgDirListW
DlgDirSelectComboBoxExA
DlgDirSelectComboBoxExW
DrawCaption
DrawEdge
DrawIcon
DrawIconEx
DrawMenuBar
DrawStateW
EditWndProc
EndDialog
EnumDesktopsW
EnumDisplayDevicesW
EnumDisplayMonitors
EnumDisplaySettingsExA
EnumPropsW
EnumWindowStationsA
EnumWindowStationsW
FindWindowA
FindWindowExW
FreeDDElParam
GetActiveWindow
GetAltTabInfo
GetClassInfoA
GetClassLongA
GetClassNameA
GetClipCursor
GetClipboardFormatNameA
GetClipboardOwner
GetClipboardViewer
GetCursorPos
GetDC
GetDesktopWindow
GetDlgItem
GetDlgItemTextW
GetDoubleClickTime
GetIconInfo
GetInputDesktop
GetKBCodePage
GetKeyNameTextA
GetKeyNameTextW
GetKeyboardLayoutList
GetLastActivePopup
GetLastInputInfo
GetListBoxInfo
GetMenu
GetMenuBarInfo
GetMenuCheckMarkDimensions
GetMenuContextHelpId
GetMenuDefaultItem
GetMenuItemInfoW
GetMenuStringW
GetMessagePos
GetMessageTime
GetMonitorInfoA
GetNextDlgGroupItem
GetOpenClipboardWindow
GetParent
GetProcessWindowStation
GetPropA
GetThreadDesktop
GetUpdateRgn
GetUserObjectInformationA
GetUserObjectSecurity
GetWindow
GetWindowInfo
GetWindowLongA
GetWindowRgn
GetWindowTextW
HideCaret
HiliteMenuItem
IMPQueryIMEW
InflateRect
InsertMenuA
InsertMenuItemW
InsertMenuW
IntersectRect
IsCharAlphaA
IsCharAlphaNumericA
IsCharUpperW
IsChild
IsDialogMessage
IsDialogMessageA
IsDialogMessageW
IsMenu
IsWindow
IsWindowEnabled
IsWindowUnicode
IsWindowVisible
IsZoomed
LoadAcceleratorsA
LoadCursorFromFileA
LoadImageA
LoadImageW
LoadMenuIndirectW
LoadStringW
LockSetForegroundWindow
LookupIconIdFromDirectoryEx
MapVirtualKeyExW
MessageBoxExA
ModifyMenuW
MonitorFromPoint
MsgWaitForMultipleObjectsEx
OemKeyScan
OemToCharA
OpenDesktopA
PaintDesktop
PeekMessageW
PostMessageA
PostQuitMessage
PostThreadMessageW
RealGetWindowClassA
RealGetWindowClassW
RegisterDeviceNotificationA
RegisterWindowMessageW
RemoveMenu
ReuseDDElParam
ScrollDC
ScrollWindow
SendDlgItemMessageW
SendIMEMessageExA
SendInput
SendMessageCallbackA
SendMessageTimeoutA
SendMessageTimeoutW
SendNotifyMessageW
SetCapture
SetClassLongA
SetClipboardViewer
SetCursorPos
SetDebugErrorLevel
SetFocus
SetKeyboardState
SetLastErrorEx
SetLayeredWindowAttributes
SetMessageQueue
SetProcessDefaultLayout
SetProcessWindowStation
SetPropW
SetRectEmpty
SetUserObjectInformationA
SetWinEventHook
SetWindowContextHelpId
SetWindowsHookExA
SetWindowsHookExW
SetWindowsHookW
ShowWindow
ShowWindowAsync
SubtractRect
TabbedTextOutW
ToAscii
ToAsciiEx
ToUnicode
ToUnicodeEx
TranslateAccelerator
TranslateMDISysAccel
UnhookWinEvent
UnhookWindowsHook
UnloadKeyboardLayout
UnpackDDElParam
UnregisterClassA
UnregisterDeviceNotification
UnregisterHotKey
UpdateWindow
UserHandleGrantAccess
VkKeyScanA
WINNLSGetEnableStatus
WaitForInputIdle
WinHelpW
WindowFromDC
WindowFromPoint
keybd_event
wsprintfW
advapi32
RegOpenKeyExA
Sections
.text Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ