Static task
static1
Behavioral task
behavioral1
Sample
38f4bb0cc4a4b1ef5e1a938f1706924e_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
38f4bb0cc4a4b1ef5e1a938f1706924e_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
38f4bb0cc4a4b1ef5e1a938f1706924e_JaffaCakes118
-
Size
332KB
-
MD5
38f4bb0cc4a4b1ef5e1a938f1706924e
-
SHA1
cfe6224370eddd012376eab62de0e7a100896f3d
-
SHA256
de0ccdfa98ebf52d58a4a4fa66c81fca8130e04833d59bbceed2e35b2745411e
-
SHA512
077aa4530eaea228ead5e7456381a38149ba49e7d405f17a118feebfa5eb86660693c6a1a5f497ede2e248e0ab5fc6ea42864afbb968a8e10477e9ef070e000d
-
SSDEEP
6144:i758mREAPqh5R2jPEQ/kSfBhRcpiVtX5spxa1lMmp/o1vYfjtxPM4U8K9MCQx/0Z:i7nRVPqhWPEZSfjupx6hp/o1AfA4EM9a
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 38f4bb0cc4a4b1ef5e1a938f1706924e_JaffaCakes118
Files
-
38f4bb0cc4a4b1ef5e1a938f1706924e_JaffaCakes118.exe windows:5 windows x86 arch:x86
fdd97e5e5bc50438b686ae425af85237
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetFocus
SetTimer
CopyRect
WindowFromPoint
AdjustWindowRect
HideCaret
UnionRect
GetMenuState
IsDlgButtonChecked
SystemParametersInfoA
CharPrevA
AttachThreadInput
IsWindowUnicode
MonitorFromRect
OffsetRect
GetProcessWindowStation
LoadStringA
VkKeyScanExW
CheckDlgButton
SetScrollInfo
GetDoubleClickTime
BeginPaint
GetPropA
DrawTextW
EnumChildWindows
TranslateMessage
CopyImage
RegisterClipboardFormatA
GetMessageTime
SetWindowPlacement
DrawFocusRect
ShowWindow
SendMessageA
IsIconic
CallNextHookEx
wsprintfW
SetWindowTextW
ChangeClipboardChain
GetWindowRect
GetWindowDC
EnumDesktopWindows
DdeGetData
ShowScrollBar
MoveWindow
AppendMenuW
GetCursor
SendMessageTimeoutA
GetSubMenu
GetDialogBaseUnits
CloseClipboard
GetScrollInfo
PeekMessageW
SetWindowsHookExW
PeekMessageA
SetRectEmpty
DdeFreeDataHandle
GetKeyNameTextW
CreateMenu
TrackMouseEvent
GetWindow
SetDlgItemInt
PostMessageA
DeferWindowPos
RemovePropA
WaitForInputIdle
ChildWindowFromPoint
PostQuitMessage
GetClassNameW
CallWindowProcW
GetActiveWindow
CheckMenuItem
RegisterClassW
LoadBitmapW
CharPrevW
SendNotifyMessageW
GetClipboardFormatNameW
GetKeyboardLayout
GetMessageW
GetIconInfo
DeleteMenu
ScreenToClient
SetWindowRgn
CharLowerW
EnableWindow
RemovePropW
GetDesktopWindow
DialogBoxIndirectParamW
CharUpperW
UpdateWindow
GetMenuStringW
GetWindowLongW
GetNextDlgTabItem
SetMenu
AllowSetForegroundWindow
EnumThreadWindows
DdeUninitialize
GetMessageA
SetWindowPos
GetComboBoxInfo
GetKeyState
SetMenuItemInfoW
MapWindowPoints
SetRect
GetClientRect
WinHelpW
IsWindowVisible
DdeNameService
GetWindowThreadProcessId
EmptyClipboard
DialogBoxParamW
TrackPopupMenu
PtInRect
RemoveMenu
CallMsgFilterW
GetMenuItemCount
GetMenuDefaultItem
CopyIcon
CreatePopupMenu
PostThreadMessageW
RegisterClipboardFormatW
InflateRect
BeginDeferWindowPos
SetPropA
DispatchMessageA
GetMessagePos
TrackPopupMenuEx
RegisterWindowMessageA
GetMenuItemInfoW
AdjustWindowRectEx
GetWindowPlacement
GetMenuItemID
GetLastActivePopup
DdeConnect
SetDlgItemTextW
WaitMessage
CharNextA
ClientToScreen
SetClipboardData
DefWindowProcW
SetWindowLongA
SetCapture
DestroyWindow
PostMessageW
MessageBoxIndirectA
ReleaseCapture
SendMessageTimeoutW
GetSystemMenu
SetParent
GetSysColorBrush
SetCursorPos
FindWindowExW
SetWindowLongW
DispatchMessageW
GetWindowTextLengthW
GetWindowLongA
EndPaint
InsertMenuItemW
SetMenuDefaultItem
DdeFreeStringHandle
SendMessageW
IntersectRect
CreateIconIndirect
SetClipboardViewer
CreateWindowExW
LoadIconW
DrawIconEx
ShowOwnedPopups
DdeClientTransaction
DdeCreateStringHandleW
DestroyMenu
GetClassLongW
IsChild
SetPropW
GetAsyncKeyState
SetFocus
SystemParametersInfoW
GetPropW
MonitorFromPoint
GetAncestor
GetTopWindow
MsgWaitForMultipleObjects
MessageBeep
RedrawWindow
GetMonitorInfoW
EndDialog
GetCapture
DialogBoxIndirectParamA
FindWindowA
EnumDisplaySettingsW
IsWindowEnabled
MapDialogRect
MsgWaitForMultipleObjectsEx
RegisterClassExW
DrawEdge
GetDlgCtrlID
LoadAcceleratorsW
InvalidateRect
MonitorFromWindow
IsMenu
GetClassInfoExW
RegisterWindowMessageW
EnumWindows
GetWindowInfo
SendDlgItemMessageW
EqualRect
LoadStringW
GetWindowRgnBox
MessageBoxW
IsHungAppWindow
DestroyAcceleratorTable
DefWindowProcA
CharNextW
GetShellWindow
GetClipboardData
CheckMenuRadioItem
IsCharAlphaNumericW
SetScrollPos
ShowCaret
ReleaseDC
LockSetForegroundWindow
PostThreadMessageA
DrawFrameControl
DdeDisconnect
DrawTextExW
GetWindowTextW
TranslateAcceleratorW
CharLowerBuffW
GetParent
GetSysColor
DdeInitializeW
EnableMenuItem
InsertMenuW
FillRect
SetMenuItemBitmaps
DdeQueryStringW
SetCursor
EndMenu
GetForegroundWindow
NotifyWinEvent
UpdateLayeredWindow
LoadCursorA
LoadCursorW
CheckRadioButton
UnregisterClassW
MapVirtualKeyW
MessageBoxIndirectW
CreateDialogParamW
EndDeferWindowPos
DialogBoxParamA
GetMenuItemInfoA
LoadImageW
IsDialogMessageW
DestroyIcon
MessageBoxExA
IsWindow
GetClassWord
DdeCreateDataHandle
GetDlgItemTextW
KillTimer
OpenClipboard
GetCursorPos
LoadMenuW
GetSystemMetrics
GetDC
AnimateWindow
SetForegroundWindow
GetLastInputInfo
IsRectEmpty
MessageBoxExW
FindWindowW
SetActiveWindow
GetDlgItem
GetClassInfoW
UnhookWindowsHookEx
advapi32
RegDeleteValueW
ConvertSidToStringSidW
UnregisterTraceGuids
GetLengthSid
RegCloseKey
CryptCreateHash
RegCreateKeyA
OpenProcessToken
SetThreadToken
RegDeleteKeyA
RegDeleteValueA
RegEnumValueW
TraceMessage
RegSetValueExW
IsTextUnicode
RegOpenKeyExW
ConvertStringSidToSidW
RegQueryValueExW
RegEnumValueA
RegQueryValueExA
RegOpenKeyExA
TraceEvent
RegQueryInfoKeyW
RegEnumKeyW
CryptHashData
GetTraceLoggerHandle
SetTokenInformation
CryptGetHashParam
GetUserNameW
OpenThreadToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCreateKeyExW
GetTraceEnableFlags
RegCreateKeyExA
ImpersonateSelf
RegQueryValueW
RegisterTraceGuidsW
DuplicateTokenEx
CryptReleaseContext
CryptDestroyHash
RegDeleteKeyW
RegOpenKeyW
GetTokenInformation
CryptAcquireContextW
CreateProcessAsUserW
RegOpenCurrentUser
GetTraceEnableLevel
RegEnumKeyExW
RegSetValueExA
uxtheme
GetThemeBackgroundExtent
OpenThemeData
GetThemeBackgroundContentRect
GetThemeMargins
GetThemeMetric
IsThemeActive
GetThemeAppProperties
DrawThemeBackground
GetThemeFont
GetThemeColor
DrawThemeParentBackground
IsAppThemed
GetThemePartSize
SetWindowTheme
CloseThemeData
psapi
GetProcessImageFileNameW
kernel32
GetProcAddress
SizeofResource
GetUserDefaultLCID
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
GetFileSize
LocalFree
GetThreadContext
GlobalAddAtomA
FlushInstructionCache
DeleteTimerQueueTimer
SetThreadPriority
CreateFileA
IsDBCSLeadByte
OpenProcess
GetFileAttributesA
GetVersionExA
OpenMutexW
TlsAlloc
GetDateFormatW
GlobalDeleteAtom
FindFirstFileW
GetThreadPriority
MoveFileW
GetLogicalDriveStringsW
GetCurrentDirectoryW
WaitForSingleObject
GetModuleFileNameW
SetProcessWorkingSetSize
DuplicateHandle
FindAtomW
SetCurrentDirectoryW
HeapFree
GetPrivateProfileStringA
CloseHandle
SetEndOfFile
GetUserDefaultUILanguage
ResetEvent
DeleteCriticalSection
InterlockedCompareExchange
CompareStringA
GetEnvironmentVariableW
GetSystemDirectoryA
SetFilePointerEx
OpenMutexA
GetVersion
GetACP
CreateThread
AddAtomW
InterlockedExchange
GetCurrentThread
EnterCriticalSection
GetVersionExW
QueryPerformanceFrequency
GlobalFree
GetProcessHeap
FileTimeToSystemTime
GetFileAttributesW
lstrlenW
CreateDirectoryW
GlobalAddAtomW
FileTimeToLocalFileTime
DeleteAtom
CreateMutexA
TlsSetValue
GetSystemDefaultLCID
GetLocalTime
GetTempFileNameW
SetThreadExecutionState
CreateProcessW
GetLongPathNameW
WritePrivateProfileStringW
QueueUserWorkItem
LoadLibraryExW
GetSystemInfo
Process32FirstW
ActivateActCtx
LocalFileTimeToFileTime
LCMapStringW
LoadLibraryW
ReadFile
IsWow64Process
ExpandEnvironmentStringsA
SetFilePointer
GetSystemDefaultUILanguage
FormatMessageW
EnumUILanguagesW
FindResourceW
ResumeThread
WritePrivateProfileSectionW
SetFileTime
GetNumberFormatW
GetTempPathW
GetFileSizeEx
SetProcessShutdownParameters
LocalReAlloc
SetEnvironmentVariableW
lstrcmpA
TryEnterCriticalSection
HeapDestroy
FindNextFileW
FreeLibraryAndExitThread
ReleaseMutex
CreateEventW
ExpandEnvironmentStringsW
SuspendThread
GetFileInformationByHandle
GlobalLock
LocalSize
GetSystemTimeAsFileTime
lstrcmpiA
lstrcmpiW
ReplaceFileW
VirtualAlloc
FindClose
HeapReAlloc
CreateTimerQueueTimer
GlobalReAlloc
GetShortPathNameW
GetModuleHandleExA
Sleep
GetCPInfo
GetLocaleInfoW
GetWindowsDirectoryW
GlobalUnlock
FindResourceExW
CreateSemaphoreW
CreateEventA
lstrlenA
DeleteFileW
UnmapViewOfFile
SetFileAttributesW
VirtualProtect
SetUnhandledExceptionFilter
SetEvent
MoveFileExW
TerminateProcess
CompareFileTime
HeapAlloc
SetCurrentDirectoryA
InterlockedIncrement
GetTimeFormatW
WaitForSingleObjectEx
GetCurrentProcessId
GetModuleHandleA
WaitForMultipleObjects
CreateDirectoryA
CreateMutexW
OutputDebugStringA
ReleaseActCtx
SetErrorMode
LockResource
GetSystemDirectoryW
CreateActCtxW
RemoveDirectoryW
CopyFileW
RaiseException
QueryDosDeviceW
TerminateThread
CreateFileW
InterlockedDecrement
LocalAlloc
DebugBreak
GetThreadLocale
UnhandledExceptionFilter
GetCurrentProcess
CreateFileMappingA
GetModuleHandleW
GetAtomNameW
GetPrivateProfileSectionW
GlobalSize
DisableThreadLibraryCalls
GetModuleHandleExW
lstrcmpW
GetExitCodeThread
GetLastError
MultiByteToWideChar
UnlockFileEx
MapViewOfFile
GlobalFlags
CompareStringW
CreateFileMappingW
SearchPathW
GetSystemTime
CreateToolhelp32Snapshot
Process32NextW
ReleaseSemaphore
LeaveCriticalSection
LoadLibraryA
GlobalAlloc
GetFileAttributesExW
GetFullPathNameW
GetSystemWow64DirectoryW
OpenEventW
SystemTimeToFileTime
TlsGetValue
GetPrivateProfileStringW
LoadResource
QueryPerformanceCounter
LockFileEx
VirtualFree
InitializeCriticalSection
FreeLibrary
WriteFile
ExitProcess
HeapCreate
SetLastError
GetModuleFileNameA
VirtualQuery
MulDiv
SetThreadContext
GetTickCount
TlsFree
GetCurrentThreadId
DeactivateActCtx
GetPrivateProfileSectionNamesW
ntdll
RtlUshortByteSwap
LdrGetDllHandle
NtAllocateVirtualMemory
gdi32
GetObjectA
GetDCOrgEx
RealizePalette
CreateFontIndirectA
SetBrushOrgEx
CreateCompatibleDC
SetViewportOrgEx
CreateDCW
CreateDIBPatternBrushPt
CloseEnhMetaFile
GetPixel
CreatePen
Rectangle
CombineRgn
SelectPalette
SetBkColor
SetViewportExtEx
SetStretchBltMode
TextOutW
GetStockObject
RestoreDC
OffsetWindowOrgEx
BitBlt
DeleteObject
GetClipBox
GetTextColor
CreateBitmap
CreateDCA
SetTextAlign
ExtTextOutW
StretchBlt
SaveDC
CloseMetaFile
GetTextMetricsW
CreateFontIndirectW
SetDCPenColor
OffsetRgn
CreatePatternBrush
GetPaletteEntries
GetLayout
GetBkMode
GetBkColor
SetLayout
GetSystemPaletteEntries
GetBrushOrgEx
SelectObject
GetTextExtentExPointI
MoveToEx
CreatePolygonRgn
GetDIBits
CreateMetaFileW
SetBkMode
DeleteDC
CreatePalette
GetTextAlign
SetMapMode
EqualRgn
GetTextExtentPoint32A
CreateHalftonePalette
SetWindowExtEx
CreateDIBSection
ExtCreateRegion
SetWindowOrgEx
LineTo
GetObjectW
GetGlyphIndicesW
CreateRectRgnIndirect
LPtoDP
GetTextExtentPointW
CreateEnhMetaFileA
GetTextCharset
SetRectRgn
GetTextExtentPoint32W
TextOutA
DeleteEnhMetaFile
GetRegionData
SetPaletteEntries
StretchDIBits
IntersectClipRect
GetRgnBox
PatBlt
CreateSolidBrush
CreateRectRgn
CreateFontW
SetTextColor
GetDeviceCaps
CreateCompatibleBitmap
PlayEnhMetaFile
RectVisible
shell32
ShellExecuteW
SHGetInstanceExplorer
ShellExecuteA
Shell_NotifyIconA
SHGetFolderPathAndSubDirW
ShellExecuteExW
SHSetLocalizedName
SHAppBarMessage
DragQueryFileW
SHGetFileInfoW
SHBrowseForFolderW
ExtractAssociatedIconExW
Shell_NotifyIconW
SHFileOperationW
SHGetFolderLocation
SHGetDataFromIDListW
ExtractIconW
ExtractIconExW
SHCreateShellItem
SHPathPrepareForWriteW
SHGetPathFromIDListA
ShellAboutW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHChangeNotify
SHGetFolderPathW
SHBindToParent
SHGetSpecialFolderPathW
SHGetDesktopFolder
Sections
.text Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE