GPackage
Behavioral task
behavioral1
Sample
3eb726d822e58890aa83559b038b2b74_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3eb726d822e58890aa83559b038b2b74_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
3eb726d822e58890aa83559b038b2b74_JaffaCakes118
-
Size
360KB
-
MD5
3eb726d822e58890aa83559b038b2b74
-
SHA1
89c5d8debcd41b89e46d5e1235e269aafdfa1ca7
-
SHA256
28b26b7b1f4bb5608954715b0206631bbe32acfdfbb7b2118f602aeb2f6b0ce1
-
SHA512
c0fc06678bb5e6d8ed9e67232b5f2d9d72754ed4c94ac3b19bfb0557227a9ca0ee3882266206ac531be2a7298f3116199a63041b5ab54f284ebc62898c684bd3
-
SSDEEP
3072:6/1qAQOL6/jznvuRB+8StaOWmqwWCYWrUnriGXPsSWDruiQQ/HuBt8j1Q1dar97C:6/iOL2z14ErWCYWzLupQmPVcri4g
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3eb726d822e58890aa83559b038b2b74_JaffaCakes118
Files
-
3eb726d822e58890aa83559b038b2b74_JaffaCakes118.exe windows:4 windows x86 arch:x86
29c52e579482135abf364acc7da65cbd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
window
?GetBackText@WWizardPage@@UAEPBGXZ
?GetCancelText@WWizardPage@@UAEPBGXZ
?OnInitDialog@WDialog@@UAEXXZ
??0WWizardPage@@QAE@PBGHPAVWWizardDialog@@@Z
??0FDelegate@@QAE@PAVFCommandTarget@@P81@AEXXZ@Z
??0WButton@@QAE@PAVWWindow@@HUFDelegate@@P6GJPAUHWND__@@IIJ@Z@Z
??1WWizardPage@@UAE@XZ
??1WButton@@UAE@XZ
?OnClose@WWindow@@UAEHXZ
?OnDestroy@WWindow@@UAEXXZ
?OnCurrent@WWizardPage@@UAEXXZ
?GetFinishText@WWizardPage@@UAEPBGXZ
?GetShow@WWizardPage@@UAEHXZ
?OnCancel@WWizardPage@@UAEXXZ
??0WCrashBoxDialog@@QAE@PBG0@Z
?hInstanceWindow@@3PAUHINSTANCE__@@A
??1WCrashBoxDialog@@UAE@XZ
?EndDialog@WDialog@@QAEXH@Z
?OnInitDialog@WWizardDialog@@UAEXXZ
??BWWindow@@QBEPAUHWND__@@XZ
??0WWizardDialog@@QAE@XZ
??0WLabel@@QAE@PAVWWindow@@HP6GJPAUHWND__@@IIJ@Z@Z
?MaybeDestroy@WWindow@@QAEXXZ
??1WLabel@@UAE@XZ
??1WWizardDialog@@UAE@XZ
?Unused@FCommandTarget@@UAEXXZ
?Show@WDialog@@UAEXH@Z
?Serialize@WWindow@@UAEXAAVFArchive@@@Z
?DoDestroy@WWindow@@UAEXXZ
?WndProc@WWindow@@UAEJIIJ@Z
?CallDefaultProc@WDialog@@UAEHIIJ@Z
?InterceptControlCommand@WWindow@@UAEHIIJ@Z
?GetText@WWindow@@UAE?AVFString@@XZ
?SetText@WWindow@@UAEXPBG@Z
?GetLength@WWindow@@UAEHXZ
?OnCopyData@WWindow@@UAEXPAUHWND__@@PAUtagCOPYDATASTRUCT@@@Z
?OnSetFocus@WWindow@@UAEXPAUHWND__@@@Z
?OnKillFocus@WWindow@@UAEXPAUHWND__@@@Z
?GetBitmapHandle@FWindowsBitmap@@QAEPAUHBITMAP__@@XZ
?OpenWindow@WProperties@@QAEXPAUHWND__@@@Z
??0WObjectProperties@@QAE@VFName@@KPBGPAVWWindow@@H@Z
?ScrollCaret@WEdit@@QAEXXZ
?OnSize@WWindow@@UAEXKHH@Z
?OnWindowPosChanging@WWindow@@UAEXPAH000@Z
?GLogWindow@@3PAVWLog@@A
?OnCommand@WWindow@@UAEXH@Z
?GetNext@WWizardPage@@UAEPAV1@XZ
?OnActivate@WWindow@@UAEXH@Z
?OnChar@WWindow@@UAEXG@Z
?OnKeyDown@WWindow@@UAEXG@Z
?OnCut@WWindow@@UAEXXZ
?OnCopy@WWindow@@UAEXXZ
?OnPaste@WWindow@@UAEXXZ
?OnShowWindow@WWindow@@UAEXH@Z
?OnUndo@WWindow@@UAEXXZ
?OnEraseBkgnd@WWindow@@UAEHXZ
?OnVScroll@WWindow@@UAEXIJ@Z
?OnHScroll@WWindow@@UAEXIJ@Z
?OnKeyUp@WWindow@@UAEXIJ@Z
?OnPaint@WWindow@@UAEXXZ
?OnCreate@WWindow@@UAEXXZ
?OnDrawItem@WWindow@@UAEXPAUtagDRAWITEMSTRUCT@@@Z
?OnMeasureItem@WWindow@@UAEXPAUtagMEASUREITEMSTRUCT@@@Z
?OnEnterIdle@WWindow@@UAEXXZ
?OnMouseEnter@WWindow@@UAEXXZ
?OnMouseLeave@WWindow@@UAEXXZ
?OnMouseHover@WWindow@@UAEXXZ
?OnTimer@WWindow@@UAEXXZ
?OnReleaseCapture@WWindow@@UAEXXZ
?OnMdiActivate@WWindow@@UAEXH@Z
?OnMouseMove@WWindow@@UAEXKUFPoint@@@Z
?OnLeftButtonDown@WWindow@@UAEXXZ
?OnLeftButtonDoubleClick@WWindow@@UAEXXZ
?OnMiddleButtonDoubleClick@WWindow@@UAEXXZ
?OnRightButtonDoubleClick@WWindow@@UAEXXZ
?OnRightButtonDown@WWindow@@UAEXXZ
?OnLeftButtonUp@WWindow@@UAEXXZ
?OnRightButtonUp@WWindow@@UAEXXZ
?OnFinishSplitterDrag@WWindow@@UAEXPAVWDragInterceptor@@H@Z
?OnSetCursor@WWindow@@UAEHXZ
?OnClose@WWizardDialog@@UAEHXZ
?OnDestroy@WWizardDialog@@UAEXXZ
?MyDrawEdge@WWindow@@UAEXPAUHDC__@@PAUtagRECT@@H@Z
?DoModal@WDialog@@UAEHPAUHINSTANCE__@@@Z
?LocalizeText@WDialog@@UAEXPBG0@Z
?Advance@WWizardDialog@@UAEXPAVWWizardPage@@@Z
?RefreshPage@WWizardDialog@@UAEXXZ
?OnBack@WWizardDialog@@UAEXXZ
?OnNext@WWizardDialog@@UAEXXZ
?OnFinish@WWizardDialog@@UAEXXZ
?OnCancel@WWizardDialog@@UAEXXZ
??0FWindowsBitmap@@QAE@H@Z
?LoadFile@FWindowsBitmap@@QAEHPBG@Z
??1WCoolButton@@UAE@XZ
??0WCoolButton@@QAE@PAVWWindow@@HUFDelegate@@K@Z
?GetRoot@WConfigProperties@@UAEPAVFTreeItem@@XZ
?GetWindowClassName@WConfigProperties@@UAEXPAG@Z
?GetPackageName@WConfigProperties@@UAEPBGXZ
?Show@WWindow@@UAEXH@Z
?ExpandAll@WProperties@@UAEXXZ
?SetValue@WProperties@@UAEXPBG@Z
?BeginSplitterDrag@WProperties@@UAEXXZ
?ForceRefresh@WProperties@@UAEXXZ
?SetItemFocus@WProperties@@UAEXH@Z
?ResizeList@WProperties@@UAEXXZ
?GetDividerWidth@WProperties@@UAEHXZ
?GetRoot@WObjectProperties@@UAEPAVFTreeItem@@XZ
?OnDestroy@WProperties@@UAEXXZ
?OnSetCursor@WProperties@@UAEHXZ
?OnFinishSplitterDrag@WProperties@@UAEXPAVWDragInterceptor@@H@Z
?OnInitDialog@WWindow@@UAEXXZ
?OnPaint@WProperties@@UAEXXZ
?OnActivate@WProperties@@UAEXH@Z
?OnSize@WProperties@@UAEXKHH@Z
?CallDefaultProc@WWindow@@UAEHIIJ@Z
?GetWindowClassName@WObjectProperties@@UAEXPAG@Z
?DoDestroy@WProperties@@UAEXXZ
?GetPackageName@WObjectProperties@@UAEPBGXZ
?Show@WObjectProperties@@UAEXH@Z
?Serialize@WProperties@@UAEXAAVFArchive@@@Z
?SetNotifyHook@WWindow@@QAEXPAVFNotifyHook@@@Z
?OnSysCommand@WWindow@@UAEHH@Z
??0WConfigProperties@@QAE@VFName@@PBG@Z
??1WObjectProperties@@UAE@XZ
??1WConfigProperties@@UAE@XZ
?SetExec@WTerminal@@QAEXPAVFExec@@@Z
?Paste@WTerminal@@UAEXXZ
?TypeChar@WTerminal@@UAEXG@Z
?OnDestroy@WLog@@UAEXXZ
?OnClose@WLog@@UAEHXZ
?OnCreate@WLog@@UAEXXZ
?OnShowWindow@WLog@@UAEXH@Z
?OnCommand@WLog@@UAEXH@Z
?OnSize@WTerminal@@UAEXKHH@Z
?OnSetFocus@WTerminal@@UAEXPAUHWND__@@@Z
?OnCopyData@WLog@@UAEXPAUHWND__@@PAUtagCOPYDATASTRUCT@@@Z
?SetText@WLog@@UAEXPBG@Z
?WndProc@WLog@@UAEJIIJ@Z
?GetWindowClassName@WLog@@UAEXPAG@Z
?GetPackageName@WLog@@UAEPBGXZ
?OpenWindow@WLog@@QAEXHH@Z
??0WLog@@QAE@PBGAAPAVFArchive@@VFName@@PAVWWindow@@@Z
?InitWindowing@@YAXXZ
??1WLog@@UAE@XZ
?OnMove@WWindow@@UAEXHH@Z
??1FWindowsBitmap@@QAE@XZ
core
??0FString@@QAE@PBG@Z
?SetStopper@FArchive@@UAEXH@Z
?AttachLazyLoader@FArchive@@UAEXPAVFLazyLoader@@@Z
?DetachLazyLoader@FArchive@@UAEXPAVFLazyLoader@@@Z
?Flush@FArchive@@UAEXXZ
?GetError@FArchive@@UAEHXZ
?appStrchr@@YAPAGPBGH@Z
??4FString@@QAEAAV0@ABV0@@Z
?IsError@FArchive@@QAEHXZ
??4FString@@QAEAAV0@PBG@Z
?ParseParam@@YAHPBG0@Z
GIsSSE
?Logf@FOutputDevice@@QAAXPBGZZ
?IsA@UObject@@QBEHPAVUClass@@@Z
??YFString@@QAEAAV0@PBG@Z
??HFString@@QAE?AV0@PBG@Z
?IsChildOf@UStruct@@QBEHPBV1@@Z
?GetTransientPackage@UObject@@SAPAVUPackage@@XZ
?GError@@3PAVFOutputDeviceError@@A
?StaticConstructObject@UObject@@SAPAV1@PAVUClass@@PAV1@VFName@@K1PAVFOutputDevice@@1@Z
?StaticLoadClass@UObject@@SAPAVUClass@@PAV2@PAV1@PBG2KPAVUPackageMap@@@Z
??0FArray@@QAE@XZ
?Add@FArray@@QAEHHH@Z
??0FFileManager@@QAE@XZ
?Init@FFileManager@@UAEXH@Z
?CalcHomeDir@FFileManager@@UAEPBGXZ
?GIsSlowTask@@3HA
?appGetVarArgs@@YAHPAGHAAPBG@Z
??0FFeedbackContext@@QAE@XZ
?GIsClient@@3HA
?GIsEditor@@3HA
?GIsStarted@@3HA
?LocalizeError@@YAPBGPBG00@Z
?GLog@@3PAVFOutputDevice@@A
?appGetSystemErrorMessage@@YAPBGH@Z
?StaticShutdownAfterError@UObject@@SAXXZ
?GErrorHist@@3PAGA
?appStrncpy@@YAPAGPAGPBGH@Z
?appStrncat@@YAPAGPAGPBGH@Z
?GIsGuarded@@3HA
?LocalizeError@@YAPBGPBDPBG1@Z
?appRequestExit@@YAXH@Z
??0FOutputDeviceError@@QAE@XZ
?Flush@FOutputDevice@@UAEXXZ
?GIsCriticalError@@3HA
?SafeSuppressed@FName@@SAHW4EName@@@Z
?appUserDir@@YAPBGXZ
?appCmdLine@@YAPBGXZ
?Parse@@YAHPBG0PAGH@Z
?appPackage@@YAPBGXZ
?appStrcat@@YAPAGPAGPBG@Z
?GNull@@3PAVFOutputDevice@@A
?GFileManager@@3PAVFFileManager@@A
?SafeString@FName@@SAPBGW4EName@@@Z
?appSprintf@@YAHPAGPBGZZ
?GLogHook@@3PAVFOutputDevice@@A
?appTimestamp@@YAPBGXZ
?Logf@FOutputDevice@@QAAXW4EName@@PBGZZ
??0FOutputDevice@@QAE@XZ
?GPageSize@@3KA
?GObjObjects@UObject@@0V?$TArray@PAVUObject@@@@A
??0FMalloc@@QAE@XZ
?GIsRunning@@3HA
?appStrfind@@YAPBGPBG0@Z
?appInit@@YAXPBG0PAVFMalloc@@PAVFOutputDevice@@PAVFOutputDeviceError@@PAVFFeedbackContext@@PAVFFileManager@@P6APAVFConfigCache@@XZH@Z
?GIsServer@@3HA
?GIsScriptable@@3HA
?GLazyLoad@@3HA
?appPreExit@@YAXXZ
?appExit@@YAXXZ
?LocalizeGeneral@@YAPBGPBG00@Z
?Log@FOutputDevice@@QAEXW4EName@@PBG@Z
?GUserIni@@3PAGA
?appStrcmp@@YAHPBG0@Z
?appStrstr@@YAPAGPBG0@Z
??8FString@@QBEHABV0@@Z
??8FString@@QBEHPBG@Z
?Log@FOutputDevice@@QAEXPBG@Z
?appAtof@@YAMPBG@Z
?appStaticString1024@@YAPAGXZ
??0FArray@@IAE@HH@Z
?winGetSizeUNICODE@@YAHPBD@Z
?winToUNICODE@@YAPAGPAGPBDH@Z
?Empty@FArray@@QAEXHH@Z
??DFString@@QBE?AV0@PBG@Z
??DFString@@QBE?AV0@ABV0@@Z
?GetPathName@UObject@@QBEPBGPAV1@PAG@Z
?LeftChop@FString@@QBE?AV1@H@Z
?appSystemTime@@YAXAAH0000000@Z
?GMachineVideo@@3PAGA
?GMachineCPU@@3PAGA
?GMachineOS@@3PAGA
?GBuildLabel@@3PAGA
??0FString@@QAE@ABV0@@Z
??YFString@@QAEAAV0@ABV0@@Z
?Parse@@YAHPBG0AAM@Z
?appRand@@YAHXZ
?appSaveStringToFile@@YAHABVFString@@PBGPAVFFileManager@@K@Z
?appLoadFileToString@@YAHAAVFString@@PBGPAVFFileManager@@@Z
?GWindowManager@@3PAVUSubsystem@@A
?appSleep@@YAXM@Z
?GScriptCycles@@3HA
?Parse@@YAHPBG0AAH@Z
?GIsBenchmarking@@3HA
?appRandInit@@YAXH@Z
?GetOuter@UObject@@QBEPAV1@XZ
?GExec@@3PAVFExec@@A
?Printf@FString@@SA?AV1@PBGZZ
?Parse@@YAHPBG0AAVFString@@@Z
??0FName@@QAE@W4EName@@@Z
?appSqrt@@YANN@Z
?ParseCommand@@YAHPAPBGPBG@Z
?StaticClass@UClass@@SAPAV1@XZ
?ParseObject@@YAHPBG0PAVUClass@@AAPAVUObject@@PAV2@@Z
?GetDefaultActor@UClass@@QAEPAVAActor@@XZ
??0FName@@QAE@PBGW4EFindName@@@Z
?StaticLoadObject@UObject@@SAPAV1@PAVUClass@@PAV1@PBG2KPAVUPackageMap@@@Z
?ExportToOutputDevice@UExporter@@SAXPAVUObject@@PAV1@AAVFOutputDevice@@PBGH@Z
?appClipboardCopy@@YAXPBG@Z
?GetDefaultObject@UClass@@QAEPAVUObject@@XZ
??0FName@@QAE@XZ
?Parse@@YAHPBG0AAVFName@@@Z
?GetName@UObject@@QBEPBGXZ
??DFName@@QBEPBGXZ
?LocalizeGeneral@@YAPBGPBDPBG1@Z
??1FArray@@QAE@XZ
?StaticClass@UPackage@@SAPAVUClass@@XZ
?Remove@FArray@@QAEXHHH@Z
?appItoa@@YAPAGH@Z
??HFString@@QAE?AV0@ABV0@@Z
?appAtoi@@YAHPBG@Z
?GIni@@3PAGA
?appMsgf@@YA?BHHPBGZZ
?TotalSize@FArchive@@UAEHXZ
?Precache@FArchive@@UAEXH@Z
??0FArchive@@QAE@XZ
??1FArchive@@UAE@XZ
?SerializeBits@FArchive@@UAEXPAXH@Z
?SerializeInt@FArchive@@UAEXAAKK@Z
?Preload@FArchive@@UAEXPAVUObject@@@Z
?CountBytes@FArchive@@UAEXKK@Z
??6FArchive@@UAEAAV0@AAPAVUObject@@@Z
??6FArchive@@UAEAAV0@AAVFName@@@Z
?MapName@FArchive@@UAEHPAVFName@@@Z
?MapObject@FArchive@@UAEHPAVUObject@@@Z
?AtEnd@FArchive@@UAEHXZ
?appUnwindf@@YAXPBGZZ
?GUnicodeOS@@3HA
?appFailAssert@@YAXPBD0H@Z
?appStricmp@@YAHPBG0@Z
?appStrlen@@YAHPBG@Z
?appFromAnsi@@YAPBGPBDPAG@Z
?appStrcpy@@YAPAGPAGPBG@Z
?GSecondsPerCycle@@3NA
??1FString@@QAE@XZ
??0FString@@QAE@XZ
?Localize@@YAPBGPBG000H@Z
??DFString@@QBEPBGXZ
?appGetAppInstanceHandle@@YAPAXXZ
?GCRCTable@@3PAKA
?GMalloc@@3PAVFMalloc@@A
??9FString@@QBEHABV0@@Z
??0FString@@QAE@PBD@Z
?GConfig@@3PAVFConfigCache@@A
?winToANSI@@YAPADPADPBGH@Z
?winGetSizeANSI@@YAHPBG@Z
?appBaseDir@@YAPBGXZ
?NotifyExec@FNotifyHook@@UAEXPAXPBG@Z
?NotifyPostChange@FNotifyHook@@UAEXPAX@Z
?NotifyPreChange@FNotifyHook@@UAEXPAX@Z
??0FNotifyHook@@QAE@XZ
??0FExec@@QAE@XZ
?GIsRequestingExit@@3HA
?AtStopper@FArchive@@UAEHXZ
?appStrupr@@YAPAGPAG@Z
engine
?GetLevel@AActor@@QBEPAVULevel@@XZ
?StaticClass@UGameEngine@@SAPAVUClass@@XZ
?UpdateString@FStats@@QAEXAAVFString@@H@Z
?StaticClass@AActor@@SAPAVUClass@@XZ
?Clear@FStats@@QAEXXZ
?GStats@@3VFStats@@A
?StaticClass@UEngine@@SAPAVUClass@@XZ
?GEngineStats@@3VFEngineStats@@A
?StaticClass@URenderDevice@@SAPAVUClass@@XZ
comdlg32
GetSaveFileNameA
d3d8
Direct3DCreate8
ddraw
DirectDrawCreate
kernel32
GetWindowsDirectoryW
GetSystemDirectoryW
GetModuleFileNameA
GetWindowsDirectoryA
GetSystemDirectoryA
CloseHandle
GetSystemInfo
GetLastError
VirtualAlloc
VirtualFree
GetFileSize
CreateFileA
CreateFileW
SetFilePointer
SetFileAttributesA
SetFileAttributesW
WriteFile
DeleteFileA
DeleteFileW
GetModuleFileNameW
MoveFileW
GetFileAttributesExW
SetCurrentDirectoryA
SetCurrentDirectoryW
GetCurrentDirectoryA
GetCurrentDirectoryW
ReadFile
CopyFileA
CopyFileW
CreateDirectoryA
CreateDirectoryW
GlobalMemoryStatus
GetCurrentThread
GetCurrentThreadId
Sleep
GetStartupInfoA
SetThreadPriority
RemoveDirectoryA
RemoveDirectoryW
FindClose
FindNextFileA
FindFirstFileA
FindNextFileW
FindFirstFileW
GetDiskFreeSpaceExW
CreateMutexA
CreateMutexW
GetCommandLineW
GetModuleHandleA
MoveFileA
user32
SetPropA
RemovePropW
RemovePropA
PeekMessageA
DispatchMessageA
GetForegroundWindow
GetWindowThreadProcessId
SetFocus
ShowWindow
PeekMessageW
TranslateMessage
DispatchMessageW
MessageBoxW
LoadIconW
LoadIconA
SetForegroundWindow
DestroyWindow
CreateDialogParamW
CreateDialogParamA
GetDlgItem
GetSystemMetrics
SetWindowPos
SendMessageW
SendMessageA
UpdateWindow
SetPropW
shell32
ShellExecuteA
ShellExecuteW
msvcr70
?terminate@@YAXXZ
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
_acmdln
exit
_cexit
_XcptFilter
_exit
_c_exit
_onexit
__dllonexit
??1type_info@@UAE@XZ
free
calloc
_purecall
_CxxThrowException
__CxxFrameHandler
__set_app_type
_controlfp
_except_handler3
Exports
Exports
Sections
.text Size: 136KB - Virtual size: 132KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: 104KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE