Static task
static1
Behavioral task
behavioral1
Sample
34ae57018b99e406ab39af30fb19d7de_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
34ae57018b99e406ab39af30fb19d7de_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
34ae57018b99e406ab39af30fb19d7de_JaffaCakes118
-
Size
179KB
-
MD5
34ae57018b99e406ab39af30fb19d7de
-
SHA1
cc37552bd44675f9585d421472cbdf017baa1491
-
SHA256
9c054aa430e71423a3b62474f4c4e9ad4afbc7e1fbfd15552ac74d704361d160
-
SHA512
383bfd6f2c3001a19493668c0e18c8f12dbd322a8cb01e3e34214eae752e13a7a3045d1db676a2d7320d08c9b06539c9e182ec767743b1035c3afd0019e22bef
-
SSDEEP
3072:IyHynF6CtAj9O2/xYd587uyd+U5mMPTr5gzWMISjfDEWAF0rC5YHxU3w:Imy4j9O2/edq5nlg0SXIqC6F
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 34ae57018b99e406ab39af30fb19d7de_JaffaCakes118
Files
-
34ae57018b99e406ab39af30fb19d7de_JaffaCakes118.exe windows:4 windows x86 arch:x86
d69ca35fee32901d73162474c3427e25
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
user32
SetTimer
SetScrollInfo
GetDC
GetSysColorBrush
GetWindowThreadProcessId
GetWindowThreadProcessId
CharUpperW
RegisterWindowMessageA
GetAppCompatFlags2
GetSysColorBrush
GetAppCompatFlags2
SetScrollInfo
RegisterWindowMessageA
DispatchMessageW
GetAppCompatFlags2
KillTimer
GetWindowDC
GetUserObjectInformationW
GetWindowLongW
GetSysColorBrush
TranslateMessageEx
GetProcessWindowStation
GetWindowLongW
GetAppCompatFlags2
GetSysColorBrush
CharUpperA
RegisterWindowMessageA
DispatchMessageW
GetSysColorBrush
GetSysColorBrush
SetScrollInfo
SetTimer
GetSysColor
SetTimer
KillTimer
RegisterClipboardFormatA
PostMessageW
TranslateMessage
GetUserObjectInformationW
KillTimer
CharUpperA
DispatchMessageW
KillTimer
GetWindowDC
GetSystemMetrics
DispatchMessageW
GetAppCompatFlags2
GetWindowDC
GetSysColor
GetSysColorBrush
KillTimer
GetWindowDC
CharUpperW
SetScrollInfo
TranslateMessage
TranslateMessage
TranslateMessage
GetWindowLongW
SetScrollInfo
KillTimer
GetAppCompatFlags2
ReleaseDC
RegisterClipboardFormatA
GetSystemMetrics
RegisterClipboardFormatA
GetAppCompatFlags2
GetWindowDC
RegisterWindowMessageA
GetWindowLongW
RegisterClipboardFormatA
PostMessageW
GetWindowThreadProcessId
PostMessageW
KillTimer
RegisterClipboardFormatA
GetAppCompatFlags2
GetSystemMetrics
GetSysColor
GetSystemMetrics
ReleaseDC
GetDC
GetSysColor
PostMessageW
SetScrollInfo
GetSystemMetrics
GetWindowLongW
GetAppCompatFlags2
GetProcessWindowStation
CharUpperA
GetProcessWindowStation
GetAppCompatFlags2
TranslateMessageEx
GetUserObjectInformationW
GetWindowLongW
GetSysColor
RegisterWindowMessageA
TranslateMessageEx
GetAppCompatFlags2
CharUpperW
SetScrollInfo
MapVirtualKeyExW
GetProcessWindowStation
CharUpperA
GetSysColor
CharUpperA
SetTimer
GetAppCompatFlags2
KillTimer
GetSysColor
RegisterClipboardFormatA
GetSystemMetrics
TranslateMessage
GetSysColor
GetWindowDC
GetAppCompatFlags2
GetAppCompatFlags2
SetScrollInfo
GetDC
DispatchMessageW
GetWindowThreadProcessId
TranslateMessageEx
GetAppCompatFlags2
GetProcessWindowStation
GetProcessWindowStation
CharUpperW
GetWindowThreadProcessId
GetWindowLongW
SetScrollInfo
GetWindowLongW
KillTimer
GetDC
GetUserObjectInformationW
GetAppCompatFlags2
CharUpperA
TranslateMessageEx
DispatchMessageW
GetWindowLongW
GetSysColor
GetWindowLongW
GetSysColor
GetWindowDC
RegisterWindowMessageA
DispatchMessageW
TranslateMessageEx
CharUpperA
GetSysColor
RegisterWindowMessageA
GetWindowLongW
GetSystemMetrics
CharUpperW
SetTimer
RegisterClipboardFormatA
GetDC
CharUpperW
CharUpperA
GetDC
GetUserObjectInformationW
GetSystemMetrics
PostMessageW
CharUpperW
GetWindowThreadProcessId
GetDC
PostMessageW
GetAppCompatFlags2
TranslateMessage
SetScrollInfo
RegisterWindowMessageA
GetWindowLongW
GetWindowDC
SetTimer
ReleaseDC
GetWindowThreadProcessId
TranslateMessageEx
GetWindowThreadProcessId
RegisterWindowMessageA
TranslateMessageEx
GetSystemMetrics
TranslateMessage
RegisterClipboardFormatA
GetAppCompatFlags2
GetUserObjectInformationW
GetWindowLongW
GetAppCompatFlags2
GetSystemMetrics
KillTimer
CharUpperA
GetSysColor
CharUpperA
DispatchMessageW
GetWindowLongW
SetScrollInfo
GetProcessWindowStation
GetWindowDC
SetTimer
GetSysColorBrush
KillTimer
GetSysColorBrush
GetWindowLongW
PostMessageW
GetWindowDC
ReleaseDC
kernel32
TerminateProcess
CreateProcessA
GetSystemTimeAsFileTime
GetStartupInfoW
VirtualProtectEx
GetStartupInfoW
ReadProcessMemory
GetStartupInfoW
GetStartupInfoW
VirtualProtectEx
CreateProcessA
LoadLibraryExW
LoadLibraryExA
ReleaseMutex
ReadProcessMemory
LoadLibraryA
WaitForSingleObject
CreateProcessA
CreateProcessA
LoadLibraryA
GetStartupInfoW
Sleep
GetSystemTime
CreateFileA
SleepEx
TerminateProcess
GetSystemTime
WaitForSingleObject
LoadLibraryExA
CreateProcessA
SleepEx
GetSystemTimeAsFileTime
ReadFile
SleepEx
ReadFile
GetStartupInfoW
GetStartupInfoA
ReadFile
ReadProcessMemory
GetSystemTime
GetSystemTime
GetStartupInfoW
GetStartupInfoW
ReleaseMutex
ReleaseMutex
LoadLibraryExW
GetSystemTimeAsFileTime
ReadFile
WriteProcessMemory
GetSystemTime
GetStartupInfoW
VirtualProtect
CreateProcessA
GetSystemTimeAsFileTime
ReadFile
ReadProcessMemory
SleepEx
LoadLibraryA
VirtualProtect
Sleep
Sleep
GetStartupInfoW
GetSystemTime
TerminateProcess
VirtualProtectEx
Sleep
ReadProcessMemory
WriteProcessMemory
GetStartupInfoA
GetStartupInfoA
LoadLibraryExA
WriteProcessMemory
ReleaseMutex
GetSystemTimeAsFileTime
TerminateProcess
GetSystemTime
GetSystemTimeAsFileTime
LoadLibraryExA
ReadProcessMemory
GetStartupInfoA
GetStartupInfoW
GetStartupInfoW
GetSystemTimeAsFileTime
LoadLibraryA
LoadLibraryExA
SleepEx
WriteProcessMemory
WriteProcessMemory
CreateProcessA
GetSystemTime
TerminateProcess
CreateFileA
CreateFileA
CreateProcessA
VirtualProtectEx
ReadFile
GetStartupInfoW
LoadLibraryExW
VirtualProtectEx
GetStartupInfoA
GetProcAddress
LoadLibraryA
VirtualProtect
GetProfileIntW
SetLocalTime
VirtualProtect
GetSystemTime
SleepEx
CreateFileA
GetSystemTimeAsFileTime
GetStartupInfoA
VirtualProtect
GetStartupInfoA
VirtualProtectEx
ReadProcessMemory
Sleep
VirtualProtect
SleepEx
VirtualProtectEx
GetStartupInfoA
Sleep
TerminateProcess
CreateProcessA
LoadLibraryA
LoadLibraryA
SleepEx
TerminateProcess
GetStartupInfoW
ReleaseMutex
LoadLibraryA
LoadLibraryA
GetStartupInfoA
LoadLibraryA
LoadLibraryA
LoadLibraryExW
WaitForSingleObject
VirtualProtectEx
VirtualProtectEx
LoadLibraryExA
GetSystemTime
TerminateProcess
GetStartupInfoW
VirtualProtectEx
WriteProcessMemory
VirtualProtectEx
WriteProcessMemory
CreateProcessA
CreateFileA
VirtualProtectEx
TerminateProcess
CreateFileA
WriteProcessMemory
WaitForSingleObject
LoadLibraryA
LoadLibraryA
VirtualProtect
WaitForSingleObject
VirtualProtectEx
TerminateProcess
VirtualProtect
ReleaseMutex
TerminateProcess
GetStartupInfoW
GetSystemTime
TerminateProcess
Sleep
ReadFile
GetStartupInfoW
CreateProcessW
VirtualProtectEx
GetSystemTimeAsFileTime
VirtualProtect
VirtualProtect
CreateFileA
GetStartupInfoA
VirtualProtectEx
TerminateProcess
TerminateProcess
ReadProcessMemory
GetStartupInfoA
WaitForSingleObject
WaitForSingleObject
GetSystemTimeAsFileTime
VirtualProtect
VirtualProtect
ReleaseMutex
CreateProcessW
LoadLibraryA
LoadLibraryExW
LoadLibraryExA
ReleaseMutex
ReadProcessMemory
WriteProcessMemory
CreateFileA
CreateFileA
CreateFileA
CreateProcessW
LoadLibraryExA
WriteProcessMemory
CreateProcessA
GetStartupInfoA
TerminateProcess
VirtualProtect
GetSystemTimeAsFileTime
GetStartupInfoW
Sections
.text Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 142KB - Virtual size: 184KB
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ndata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_MEM_READ