Behavioral task
behavioral1
Sample
478b23f4d1a7b2c531f17ca5dd15ecfd_JaffaCakes118.exe
Resource
win7-20240704-en
General
-
Target
478b23f4d1a7b2c531f17ca5dd15ecfd_JaffaCakes118
-
Size
4.3MB
-
MD5
478b23f4d1a7b2c531f17ca5dd15ecfd
-
SHA1
91448653d6015fe43b8f8c774084c3c6dc483abe
-
SHA256
0749a0ec4509bcc67f939eaa26b2f17beba4fd75066787cb24e26b4a8bb6a8e8
-
SHA512
15a1c97ccf0aa60638c0bc6b5fce9357904abb97addaf261402b5c12b0f9c92edd1d9643e53642f31da811da4bd080c24fc838a8f00498c7015d8290b142c48e
-
SSDEEP
98304:ezb5gez1Qum2/pojY7i8esPpHlglkImV1:7N8eod5r
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 478b23f4d1a7b2c531f17ca5dd15ecfd_JaffaCakes118
Files
-
478b23f4d1a7b2c531f17ca5dd15ecfd_JaffaCakes118.exe windows:4 windows x86 arch:x86
bc93f7c66ba66816e7746e31e27a6d33
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
comctl32
InitCommonControlsEx
ord6
ImageList_GetImageCount
ImageList_GetIcon
ImageList_Add
ImageList_ReplaceIcon
ImageList_SetBkColor
_TrackMouseEvent
ImageList_Create
ImageList_Draw
ImageList_Destroy
ImageList_DragShowNolock
ImageList_DragMove
ImageList_EndDrag
ImageList_DragLeave
ImageList_DragEnter
ImageList_BeginDrag
ImageList_AddMasked
ImageList_GetIconSize
msvfw32
MCIWndCreateA
winmm
mciSendCommandA
kernel32
WaitForMultipleObjectsEx
FindFirstChangeNotificationA
GetLocaleInfoA
GetNumberFormatA
GetDateFormatA
CompareStringA
lstrlenA
GetDriveTypeA
CreateDirectoryA
GetModuleFileNameA
SystemTimeToFileTime
GetCurrentDirectoryA
SetCurrentDirectoryA
PeekNamedPipe
GetExitCodeProcess
SetPriorityClass
CreateProcessA
GetStartupInfoA
CreatePipe
GetShortPathNameA
GetModuleHandleA
lstrcpynA
SetLastError
LocalAlloc
GetCurrentThreadId
CopyFileW
LockResource
LoadResource
FindResourceA
GlobalSize
GlobalReAlloc
LoadLibraryExA
SizeofResource
EnumResourceNamesA
SearchPathA
GetProfileIntA
GetModuleFileNameW
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetWindowsDirectoryA
FindNextChangeNotification
lstrcpyA
lstrcatA
LocalFileTimeToFileTime
InterlockedExchange
HeapReAlloc
HeapAlloc
HeapFree
RtlUnwind
ExitProcess
TerminateProcess
GetCurrentProcess
GetTimeZoneInformation
RaiseException
SetEnvironmentVariableA
TlsSetValue
TlsGetValue
ExitThread
GetFileType
HeapSize
CreateDirectoryW
GetCommandLineA
GetVersion
VirtualFree
VirtualAlloc
IsBadWritePtr
FatalAppExitA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
TlsAlloc
SetHandleCount
GetStdHandle
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
GetStringTypeA
GetStringTypeW
UnhandledExceptionFilter
SetStdHandle
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
IsBadReadPtr
IsBadCodePtr
CompareStringW
GetLocaleInfoW
GetSystemDirectoryA
ReleaseMutex
CreateMutexA
GetFileAttributesW
MultiByteToWideChar
FileTimeToSystemTime
GetProfileStringA
FileTimeToLocalFileTime
GetFileAttributesA
SetFileAttributesA
WideCharToMultiByte
FindClose
FindFirstFileA
CloseHandle
GetFileSize
CreateFileA
Sleep
InitializeCriticalSection
InterlockedCompareExchange
DeleteCriticalSection
EnterCriticalSection
FindCloseChangeNotification
FindNextFileA
MulDiv
CompareFileTime
MoveFileA
LeaveCriticalSection
MoveFileExA
CopyFileA
GetTempFileNameA
GetFileTime
SetFileTime
CreateThread
SetThreadPriority
WaitForSingleObject
AreFileApisANSI
GetLastError
ReadFile
SetFilePointer
WriteFile
SetEndOfFile
LocalUnlock
LocalLock
CreateEventA
lstrcpyW
ResetEvent
InterlockedDecrement
InterlockedIncrement
SetEvent
GetLocalTime
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
DosDateTimeToFileTime
GetSystemTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
FormatMessageW
LocalFree
FormatMessageA
LoadLibraryW
LoadLibraryA
GetFileAttributesExW
GetSystemTimeAsFileTime
FreeLibrary
GetProcAddress
GetFullPathNameW
GetFullPathNameA
GetDiskFreeSpaceW
GetDiskFreeSpaceA
DeleteFileW
DeleteFileA
GetTempPathW
GetTempPathA
CreateFileW
CreateFileMappingA
MapViewOfFile
UnlockFileEx
UnmapViewOfFile
GetVersionExA
LockFileEx
LockFile
UnlockFile
FlushFileBuffers
user32
EnumChildWindows
IsIconic
ModifyMenuA
GetMenuItemID
GetMenuStringA
MessageBeep
GetIconInfo
AttachThreadInput
GetCursor
GetWindowThreadProcessId
IsRectEmpty
IntersectRect
CreateDialogIndirectParamA
SendDlgItemMessageA
MsgWaitForMultipleObjects
EnableWindow
DefFrameProcA
DefDlgProcA
wsprintfA
CreateIconFromResource
CreateIconFromResourceEx
AppendMenuA
LoadStringW
CheckDlgButton
IsDlgButtonChecked
SetCursorPos
AdjustWindowRect
FindWindowA
IsZoomed
SetMenu
UnionRect
CheckRadioButton
SetDlgItemInt
GetDlgItemInt
CreateDialogParamA
IsDialogMessageA
CharNextA
CopyRect
InflateRect
CreateIconIndirect
DrawFrameControl
EqualRect
SetPropA
RemovePropA
GetPropA
IsWindowEnabled
SetScrollPos
SetScrollRange
EnumWindows
RegisterHotKey
UnregisterHotKey
BringWindowToTop
IsWindow
EnumThreadWindows
PostQuitMessage
GetSystemMenu
TranslateMDISysAccel
LoadAcceleratorsA
FindWindowExA
GetMessagePos
SetClassLongA
GetMenu
DrawMenuBar
WindowFromPoint
TranslateAcceleratorA
GetClassNameA
PeekMessageA
GetMessageA
TranslateMessage
DispatchMessageA
GetForegroundWindow
SetForegroundWindow
ChildWindowFromPoint
GetWindowTextA
GetMenuItemInfoA
IsMenu
DrawIconEx
DestroyIcon
SystemParametersInfoA
CreatePopupMenu
InsertMenuA
MapWindowPoints
TrackPopupMenuEx
IsChild
ClipCursor
DrawFocusRect
DestroyCursor
GetScrollPos
LoadImageA
ClientToScreen
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
PtInRect
DrawEdge
DrawTextA
GetSysColor
SetTimer
CheckMenuRadioItem
RemoveMenu
GetMenuItemCount
IsClipboardFormatAvailable
DeleteMenu
DestroyWindow
SetParent
PostMessageA
SetWindowTextA
CheckMenuItem
GetSystemMetrics
GetWindowRect
SetCapture
ReleaseCapture
LoadIconA
RegisterClassA
GetClassInfoA
CreateWindowExA
DefMDIChildProcA
DefWindowProcA
BeginPaint
EndPaint
GetScrollInfo
ScrollWindow
SetScrollInfo
DialogBoxParamA
GetDlgItemTextA
EndDialog
GetWindow
MoveWindow
GetClientRect
SetDlgItemTextA
GetDlgItem
ShowWindow
MessageBoxA
GetMenuState
SetWindowPos
UpdateWindow
LoadCursorA
SetCursor
GetClipboardData
RegisterClipboardFormatA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
ShowCursor
IsWindowVisible
GetKeyState
SetFocus
GetCursorPos
ScreenToClient
LoadMenuA
GetSubMenu
EnableMenuItem
GetParent
TrackPopupMenu
DestroyMenu
SetWindowLongA
GetWindowLongA
KillTimer
CallWindowProcA
LoadStringA
SendMessageA
FillRect
GetDC
ReleaseDC
InvalidateRect
GetDesktopWindow
SetRect
LoadBitmapA
GetFocus
gdi32
GetSystemPaletteEntries
DeleteDC
StretchDIBits
GetStockObject
SelectObject
CreateCompatibleDC
SetStretchBltMode
GetTextExtentPointA
GetDeviceCaps
GetTextMetricsA
CreateFontIndirectA
TextOutA
SetTextColor
CreatePalette
CreateBrushIndirect
SetBkMode
SetBkColor
Rectangle
CreatePen
CreateSolidBrush
RectVisible
GetObjectA
SetBrushOrgEx
Polyline
ExtTextOutA
LineTo
MoveToEx
GetBkColor
StretchBlt
CreateDCA
SetROP2
GdiFlush
PatBlt
SetViewportExtEx
SetWindowExtEx
SetMapMode
PlayMetaFile
SetBoundsRect
SetViewportOrgEx
SetWindowOrgEx
GetDIBits
SelectClipRgn
CreateRectRgn
StartDocA
SetAbortProc
EndDoc
StartPage
EndPage
RoundRect
StrokePath
FillPath
EndPath
BeginPath
GetBkMode
GetCharABCWidthsFloatA
Ellipse
Polygon
GetEnhMetaFileHeader
DeleteEnhMetaFile
PlayEnhMetaFile
SelectPalette
RealizePalette
DeleteObject
CreateDIBSection
SetWinMetaFileBits
GetEnhMetaFileA
CreateCompatibleBitmap
CreateDIBitmap
BitBlt
CloseEnhMetaFile
SetDIBitsToDevice
CreateEnhMetaFileA
GetTextExtentPoint32A
CreateBitmap
winspool.drv
EnumPrintersA
OpenPrinterA
ClosePrinter
DocumentPropertiesA
comdlg32
ChooseFontA
PrintDlgA
ChooseColorA
GetSaveFileNameA
GetOpenFileNameA
advapi32
RegEnumKeyA
RegOpenKeyExA
RegDeleteKeyA
RegDeleteValueA
RegSetValueA
RegQueryValueA
RegCreateKeyA
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
shell32
DragFinish
SHGetPathFromIDListW
ExtractIconA
DragQueryFileA
ShellExecuteExA
ShellExecuteA
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHChangeNotify
SHGetFileInfoA
SHGetDesktopFolder
SHFileOperationA
ord155
DragAcceptFiles
ExtractIconExA
ord17
ord16
ord18
SHGetSpecialFolderLocation
ord195
ole32
CreateStreamOnHGlobal
PropVariantClear
CLSIDFromString
GetHGlobalFromStream
RevokeDragDrop
RegisterDragDrop
OleUninitialize
OleInitialize
DoDragDrop
CoGetMalloc
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemRealloc
oleaut32
VariantInit
Sections
.text Size: 2.9MB - Virtual size: 2.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 216KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 428KB - Virtual size: 479KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 688KB - Virtual size: 688KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.UPX0 Size: 104KB - Virtual size: 252KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE