c:\hqfe
Static task
static1
Behavioral task
behavioral1
Sample
3f3303fa23e6f135c699cda01a2c986a_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3f3303fa23e6f135c699cda01a2c986a_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3f3303fa23e6f135c699cda01a2c986a_JaffaCakes118
-
Size
360KB
-
MD5
3f3303fa23e6f135c699cda01a2c986a
-
SHA1
f2c3bd212c4e75618285395d039b631c54598fbf
-
SHA256
5ed46d765c7acc32983fe62596005817dac6cc210e226653a5d3cd7b236a8542
-
SHA512
e9b781050ecfa591f1f3cf4cb845af9ad82a63ce42d98e3e078eea835067d7e805571c06b0384adce8b9a7c5a1cb6ef829a467535c0695036648f92e9a97d8de
-
SSDEEP
6144:DGAPhh3DgxDVXHK4HOhlFwRByv4nD4hzsYi/SxCjQ0R6Vt56QX3/00Av:Hf3+DFlWlFwRYK4OHKYjTR63XB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3f3303fa23e6f135c699cda01a2c986a_JaffaCakes118
Files
-
3f3303fa23e6f135c699cda01a2c986a_JaffaCakes118.exe windows:4 windows x86 arch:x86
01d7d938fd31c3626c604f4c65b415e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ole32
CoTaskMemFree
WriteClassStm
CoRegisterMessageFilter
OleDuplicateData
OleFlushClipboard
WriteClassStg
CoCreateInstance
SetConvertStg
GetHGlobalFromILockBytes
CoLockObjectExternal
OleCreateFromFile
CreateFileMoniker
CreateOleAdviseHolder
CreateStreamOnHGlobal
CLSIDFromString
WriteFmtUserTypeStg
CoGetClassObject
OleRegGetUserType
OleQueryCreateFromData
CreateGenericComposite
ReadFmtUserTypeStg
StgIsStorageILockBytes
CoRevokeClassObject
OleLockRunning
OleSetMenuDescriptor
StgOpenStorage
OleCreateLinkToFile
CoGetInterfaceAndReleaseStream
StgCreateDocfile
OleRegEnumVerbs
DoDragDrop
OleCreateFromData
CoTreatAsClass
OleDestroyMenuDescriptor
OleSetContainedObject
CreateItemMoniker
CoTaskMemAlloc
OleRegGetMiscStatus
ReleaseStgMedium
OleCreate
OleSetClipboard
StringFromGUID2
StringFromCLSID
IsAccelerator
OleTranslateAccelerator
CreateILockBytesOnHGlobal
ReadClassStg
OleCreateStaticFromData
OleIsCurrentClipboard
OleQueryLinkFromData
CoFreeUnusedLibraries
OleCreateMenuDescriptor
OleGetIconOfClass
OleCreateLinkFromData
OleSave
CoUninitialize
CLSIDFromProgID
OleLoad
CoInitialize
OleInitialize
StgCreateDocfileOnILockBytes
OleRun
StgOpenStorageOnILockBytes
OleUninitialize
StgIsStorageFile
GetRunningObjectTable
GetClassFile
RevokeDragDrop
CoRegisterClassObject
CreateBindCtx
RegisterDragDrop
CoDisconnectObject
shell32
SHGetDataFromIDListW
DragQueryFileW
ord155
SHGetSpecialFolderLocation
SHGetFolderPathW
DragQueryFileA
SHChangeNotify
SHGetPathFromIDListA
SHBrowseForFolderW
DragFinish
SHBrowseForFolderA
SHAppBarMessage
ExtractIconA
ShellExecuteA
SHGetDesktopFolder
ShellExecuteW
ExtractIconExW
SHGetPathFromIDListW
SHGetMalloc
comctl32
CreateStatusWindowW
ImageList_Draw
ImageList_GetDragImage
ImageList_DrawEx
ImageList_Remove
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_Merge
ImageList_Add
ImageList_SetImageCount
ImageList_LoadImageA
ImageList_GetBkColor
ImageList_AddMasked
ImageList_SetDragCursorImage
CreatePropertySheetPageA
ord17
ImageList_BeginDrag
ImageList_GetIconSize
ImageList_Create
ImageList_Read
ImageList_DragLeave
ImageList_Replace
ImageList_Write
_TrackMouseEvent
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_EndDrag
PropertySheetW
CreateToolbarEx
ImageList_DragMove
InitCommonControlsEx
DestroyPropertySheetPage
version
VerLanguageNameA
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
user32
ReuseDDElParam
LoadImageA
RegisterWindowMessageA
CallNextHookEx
EnableWindow
SetLayeredWindowAttributes
SetWindowLongW
DefWindowProcW
SetCapture
SendDlgItemMessageA
FindWindowExW
SetScrollInfo
MoveWindow
IsDlgButtonChecked
DefMDIChildProcW
SetForegroundWindow
EndDeferWindowPos
ReleaseDC
GetMessageA
LoadIconW
TrackPopupMenu
CharLowerA
wsprintfW
CreateWindowExW
RegisterClipboardFormatA
GetMenuItemID
InsertMenuW
BeginPaint
IsCharLowerA
CreateWindowExA
ScrollWindowEx
GetScrollRange
UpdateWindow
GetPropA
CharNextA
SetWindowRgn
DrawEdge
CheckDlgButton
GetDesktopWindow
TrackPopupMenuEx
GetMenuItemInfoA
GetWindowRect
GetWindowPlacement
GetOpenClipboardWindow
GetMenuCheckMarkDimensions
IsDialogMessageA
GetSubMenu
SetDlgItemTextW
ValidateRect
ModifyMenuW
SetWindowContextHelpId
GetNextDlgTabItem
GetMessagePos
wsprintfA
FrameRect
GetUpdateRgn
ClientToScreen
RedrawWindow
CopyAcceleratorTableA
WindowFromPoint
GrayStringA
SetScrollRange
PostThreadMessageA
SetDlgItemInt
SetDlgItemTextA
DispatchMessageA
InvalidateRgn
CreateCaret
UnregisterClassW
EqualRect
GetDC
PostMessageW
CharToOemA
GetClassNameA
RemovePropA
DrawFocusRect
CallWindowProcA
RemoveMenu
DestroyCursor
GetWindowThreadProcessId
LoadMenuA
ScreenToClient
GetActiveWindow
GetClassInfoExW
IsWindowEnabled
WinHelpA
LoadIconA
SetActiveWindow
RegisterClassExA
LockWindowUpdate
GetClassInfoA
TranslateAcceleratorA
DefWindowProcA
EndDialog
DrawFrameControl
CallWindowProcW
SetClipboardData
EnumChildWindows
SetMenuItemBitmaps
KillTimer
PostQuitMessage
SendMessageA
CreateAcceleratorTableA
DispatchMessageW
GetKeyState
SetParent
PostThreadMessageW
EndPaint
GetWindowTextA
TranslateMDISysAccel
GetMessageTime
EnumWindows
BeginDeferWindowPos
MessageBeep
RegisterClassExW
GetParent
GetClassInfoW
DestroyIcon
RegisterWindowMessageW
SetMenuInfo
ShowWindow
IsRectEmpty
CharUpperA
DefDlgProcA
keybd_event
CreatePopupMenu
UnhookWindowsHookEx
DestroyWindow
GetMenuStringW
GetClipboardViewer
CreateIconIndirect
GetMenuDefaultItem
DrawIcon
AdjustWindowRectEx
GetFocus
SystemParametersInfoA
GetSystemMetrics
IsMenu
IsWindow
SetMenu
CheckMenuItem
IsIconic
EmptyClipboard
ShowScrollBar
GetCursorPos
MapVirtualKeyExA
SetWindowTextW
SetRect
GetDlgItem
GetKeyNameTextA
ChildWindowFromPointEx
SetScrollPos
ExitWindowsEx
GetMenuState
UnionRect
SetWindowTextA
IsWindowVisible
GetTabbedTextExtentA
RegisterClassA
RegisterClassW
DrawIconEx
SetWindowPlacement
GetSysColorBrush
GetWindowDC
SetPropA
PeekMessageA
GetDCEx
InsertMenuItemW
GetWindowTextLengthA
AppendMenuA
GetAsyncKeyState
SetWindowPos
CopyAcceleratorTableW
InflateRect
ChildWindowFromPoint
GetLastActivePopup
GetTopWindow
GetMenu
SetWindowsHookExW
GetClientRect
SetTimer
ReleaseCapture
CopyIcon
CreateMenu
GetForegroundWindow
GetWindow
OffsetRect
MapWindowPoints
OpenClipboard
GetSysColor
DdeCreateStringHandleA
DialogBoxParamA
DestroyMenu
DrawTextA
IntersectRect
HideCaret
WaitMessage
GetMenuItemCount
GetWindowLongA
CloseClipboard
SetMenuDefaultItem
DrawStateW
TranslateMessage
SetWindowLongA
TabbedTextOutA
GetClassNameW
DrawMenuBar
ShowOwnedPopups
CreateDialogIndirectParamA
SetFocus
DefMDIChildProcA
UnregisterClassA
FillRect
PtInRect
PeekMessageW
IsChild
DeferWindowPos
GetMessageW
MessageBoxA
DrawTextW
MessageBoxW
MapDialogRect
EnableMenuItem
ExcludeUpdateRgn
GetCapture
GetDlgItemTextA
CopyRect
GetDlgCtrlID
SendMessageW
PostMessageA
LoadCursorA
WinHelpW
GetClipboardData
SetRectEmpty
DrawTextExA
AppendMenuW
SetCursor
DeleteMenu
GetWindowRgn
ModifyMenuA
GetDoubleClickTime
GetScrollInfo
MapVirtualKeyA
IsClipboardFormatAvailable
oleaut32
LoadTypeLi
advapi32
GetUserNameW
StartServiceCtrlDispatcherA
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExW
CreateServiceA
DeleteService
RegSetValueExW
GetTokenInformation
RegQueryInfoKeyA
AdjustTokenPrivileges
GetSidIdentifierAuthority
RegEnumValueA
OpenThreadToken
ControlService
RegDeleteKeyA
OpenServiceA
LookupPrivilegeValueA
SetSecurityDescriptorOwner
CryptGetHashParam
OpenSCManagerA
RegQueryValueW
RegEnumKeyA
GetLengthSid
AddAccessAllowedAce
RegEnumValueW
RegSetValueExA
IsValidSid
GetFileSecurityA
RegDeleteKeyW
RevertToSelf
RegQueryValueExW
GetUserNameA
RegCreateKeyExA
RegCreateKeyExW
RegisterServiceCtrlHandlerA
CryptHashData
RegCreateKeyA
ImpersonateSelf
CloseServiceHandle
InitializeAcl
RegEnumKeyW
RegOpenKeyA
EqualSid
SetSecurityDescriptorGroup
StartServiceW
OpenProcessToken
IsValidSecurityDescriptor
SetServiceStatus
CryptDecrypt
RegOpenKeyExA
RegQueryValueA
CryptCreateHash
RegDeleteValueA
RegCloseKey
AccessCheck
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
FreeSid
RegDeleteValueW
AllocateAndInitializeSid
RegOpenKeyW
kernel32
GetConsoleMode
FindNextFileW
ResetEvent
GetLocaleInfoA
SetLastError
CreateThread
TlsSetValue
GetFileInformationByHandle
FindClose
HeapAlloc
SetFileAttributesA
MoveFileExW
InterlockedExchange
GetVersionExA
HeapReAlloc
LocalReAlloc
FindFirstFileA
Sleep
GetCurrentThreadId
TerminateProcess
GetEnvironmentStrings
CreateProcessW
GetUserDefaultLCID
FlushInstructionCache
RtlUnwind
OpenMutexA
EnumResourceLanguagesW
VirtualFree
WritePrivateProfileStringA
HeapFree
GetModuleHandleA
IsValidCodePage
DeviceIoControl
IsValidLocale
DeleteFileA
ReadFile
DuplicateHandle
SetConsoleCtrlHandler
SuspendThread
CloseHandle
WriteConsoleA
WideCharToMultiByte
InitializeCriticalSectionAndSpinCount
LockFile
SetCurrentDirectoryA
FormatMessageW
FindFirstFileW
SetEnvironmentVariableA
DeleteCriticalSection
GetCommandLineW
GetStartupInfoA
CreateDirectoryA
GlobalGetAtomNameA
FreeEnvironmentStringsW
GetACP
GetSystemDefaultLangID
SizeofResource
LoadLibraryA
FindResourceA
GetTempFileNameA
InterlockedDecrement
GetFullPathNameW
GetCurrentProcessId
LCMapStringA
GlobalLock
CreateMutexA
WriteConsoleW
SetStdHandle
lstrcpyA
SetErrorMode
GetLocaleInfoW
GetStdHandle
GlobalFindAtomW
TlsGetValue
LocalAlloc
CreateProcessA
IsBadCodePtr
GetStringTypeA
MultiByteToWideChar
FlushFileBuffers
GetEnvironmentStringsW
GlobalDeleteAtom
SetThreadPriority
CopyFileA
SetHandleCount
GetFileTime
GlobalFindAtomA
VirtualAlloc
GetSystemTime
GetConsoleOutputCP
SetUnhandledExceptionFilter
DosDateTimeToFileTime
GetTimeFormatA
InterlockedIncrement
IsBadStringPtrA
lstrlenA
FileTimeToLocalFileTime
FreeLibrary
GetCurrentDirectoryA
WriteFile
UnlockFile
lstrcatA
lstrcpyW
UnhandledExceptionFilter
SetEndOfFile
EnterCriticalSection
MulDiv
GetLastError
GetComputerNameA
FindResourceW
CreateMutexW
GetFileAttributesW
WinExec
GetModuleHandleW
GetCPInfo
GetModuleFileNameA
UnmapViewOfFile
GetOEMCP
IsDebuggerPresent
GetFileSize
EnumSystemLocalesA
IsBadReadPtr
GetTickCount
IsBadWritePtr
GetCurrentDirectoryW
GetLogicalDrives
GetVolumeInformationA
QueryPerformanceCounter
FindFirstChangeNotificationA
GetPrivateProfileStringW
SetFilePointer
InterlockedCompareExchange
CreateEventW
SetCommBreak
GetProcAddress
HeapCreate
VirtualProtect
FindResourceExA
CompareStringW
HeapSize
GetFullPathNameA
LocalFree
lstrcmpW
LeaveCriticalSection
VirtualQuery
InitializeCriticalSection
SetEvent
GetDateFormatA
lstrcmpiW
ExitProcess
GlobalReAlloc
RaiseException
GetTimeZoneInformation
GetVersion
lstrcmpA
TlsAlloc
GetEnvironmentVariableA
GetEnvironmentVariableW
GetThreadLocale
FreeResource
GetCurrentThread
ResumeThread
LCMapStringW
lstrcpynA
GetSystemInfo
GetConsoleCP
FileTimeToSystemTime
GlobalAddAtomA
GlobalFlags
GetCommandLineA
TlsFree
GetStringTypeW
GetCurrentProcess
LoadLibraryExW
lstrlenW
FatalAppExitA
GetLocalTime
GlobalUnlock
SetCommState
ClearCommBreak
GlobalAlloc
FindNextFileA
SetCommTimeouts
ExpandEnvironmentStringsA
CreateFileA
GetSystemTimeAsFileTime
GetFileAttributesA
GetCommState
LoadResource
FileTimeToDosDateTime
SystemTimeToTzSpecificLocalTime
CreateFileMappingA
SetTimeZoneInformation
LockResource
GetFileType
ConvertDefaultLocale
HeapDestroy
WaitForSingleObject
FreeEnvironmentStringsA
CompareStringA
MoveFileA
GlobalFree
CreateEventA
gdi32
SetGraphicsMode
GetDIBits
ExcludeClipRect
SetColorAdjustment
GdiComment
GetTextCharsetInfo
GetTextFaceA
RectVisible
CreateCompatibleBitmap
GdiFlush
CreateBitmapIndirect
ExtTextOutW
UnrealizeObject
ExtCreatePen
SetPixel
GetBoundsRect
GetFontData
CreateFontA
GetClipBox
IntersectClipRect
ExtEscape
ScaleWindowExtEx
DeleteObject
GetPixel
Polyline
OffsetWindowOrgEx
CreateFontIndirectA
GetPath
CreateDCA
FlattenPath
GetTextColor
OffsetRgn
SetROP2
GetRgnBox
GetCharWidthA
CreateHalftonePalette
StartDocA
StrokeAndFillPath
SetRectRgn
CreateEllipticRgn
SetDIBitsToDevice
PolyPolygon
GetTextMetricsW
PlayEnhMetaFile
GetTextExtentPoint32W
ExtTextOutA
GetColorAdjustment
CloseFigure
SetPixelV
CreateDIBitmap
GetCurrentPositionEx
RoundRect
SelectObject
GetObjectA
SelectClipRgn
GetWindowOrgEx
PatBlt
GetObjectW
SetTextCharacterExtra
SetBkMode
SetTextAlign
PtInRegion
GetStretchBltMode
CreateDIBSection
CreatePalette
SetBrushOrgEx
GetDeviceCaps
CreateHatchBrush
PolyDraw
PaintRgn
CreateBrushIndirect
GetViewportOrgEx
SetMiterLimit
GetObjectType
CreateDiscardableBitmap
SetTextColor
EndPath
SetArcDirection
ArcTo
GetTextExtentPoint32A
SelectClipPath
BeginPath
GetCharWidthFloatA
StretchBlt
CreateBitmap
CreateEllipticRgnIndirect
OffsetClipRgn
ScaleViewportExtEx
CreatePatternBrush
ResizePalette
AbortDoc
Escape
WidenPath
GetBitmapBits
Polygon
RestoreDC
SetMapperFlags
EnumObjects
MaskBlt
CreateDIBPatternBrushPt
SetPaletteEntries
RectInRegion
Pie
SetStretchBltMode
EnumMetaFile
SetAbortProc
DeleteEnhMetaFile
PathToRegion
ResetDCA
ExtCreateRegion
Rectangle
SaveDC
CreateCompatibleDC
GetTextExtentPointA
TextOutA
GetCharABCWidthsFloatA
AbortPath
DPtoLP
PolyBezier
CreateRectRgnIndirect
CloseMetaFile
GetTextAlign
SetViewportExtEx
SelectPalette
EndPage
EnumFontFamiliesW
SetPolyFillMode
MoveToEx
Ellipse
EndDoc
RealizePalette
OffsetViewportOrgEx
FillRgn
GetMapMode
SetDIBits
FrameRgn
PlayMetaFile
LineTo
CreatePolygonRgn
CreateFontW
GetTextMetricsA
GetGlyphOutlineA
PolylineTo
GetEnhMetaFileHeader
ExtSelectClipRgn
CreateRoundRectRgn
CreateRectRgn
SetWindowOrgEx
GetPaletteEntries
SetMapMode
GetCharABCWidthsW
CreateSolidBrush
GetPolyFillMode
LPtoDP
GetClipRgn
GetMiterLimit
GetWindowExtEx
SetViewportOrgEx
ExtFloodFill
EnumFontFamiliesExA
InvertRgn
PlgBlt
SetWindowExtEx
GetBkColor
CombineRgn
PlayMetaFileRecord
GetRegionData
GetCurrentObject
SetBitmapDimensionEx
GetBitmapDimensionEx
CopyMetaFileA
BitBlt
GetDCOrgEx
GetNearestColor
CreatePolyPolygonRgn
GetViewportExtEx
GetBkMode
GetKerningPairsA
CreateMetaFileA
CreatePen
Arc
TextOutW
GetStockObject
AnimatePalette
SetBoundsRect
StretchDIBits
PtVisible
StartPage
GetAspectRatioFilterEx
AngleArc
DeleteDC
EqualRgn
SetBkColor
Chord
StrokePath
GetBrushOrgEx
DrawEscape
Sections
.text Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ