Static task
static1
Behavioral task
behavioral1
Sample
495be0487794a4ac731b56c1e2f59899_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
495be0487794a4ac731b56c1e2f59899_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
495be0487794a4ac731b56c1e2f59899_JaffaCakes118
-
Size
1.1MB
-
MD5
495be0487794a4ac731b56c1e2f59899
-
SHA1
3c1eb37d1e5cbc16a6c4824e2172301e2def352b
-
SHA256
5a81408f5a8cb56a82e736c7a4d0bd1b290536e8de7bb85e3c893e34d7f73d24
-
SHA512
0fad56daa40e779077535016b5bc9bfcb71a71045df17936f699971590e18bf508ab7343e142b6cbff75de2d2ec190f5724b3d4acb206dcf9bc31090b41dc918
-
SSDEEP
24576:EifLNgbNpU8fBos6x2stE2WTJbxIdJec9uDdqA:N/8fSTx2R2WTJeJeQScA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 495be0487794a4ac731b56c1e2f59899_JaffaCakes118
Files
-
495be0487794a4ac731b56c1e2f59899_JaffaCakes118.exe windows:4 windows x86 arch:x86
b99c676e7bff41110039aa966d06cf92
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msimg32
TransparentBlt
AlphaBlend
winmm
sndPlaySoundA
timeGetTime
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
hanauthforclient
HanAuthGetServiceTypeCode
HanAuthRefresh
HanAuthGetId
HanAuthForClientGameString
HanAuthInitGameString
UpdateGameString
kernel32
GetFileTime
GlobalFlags
GetCPInfo
GetOEMCP
GetTickCount
GetSystemTimeAsFileTime
RtlUnwind
GetTimeZoneInformation
GetLocalTime
ExitProcess
TerminateProcess
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
VirtualQuery
TlsGetValue
HeapReAlloc
ExitThread
CreateThread
HeapSize
SetStdHandle
GetFileType
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetDriveTypeA
LCMapStringA
LCMapStringW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
GlobalHandle
GlobalReAlloc
InterlockedIncrement
RaiseException
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
WritePrivateProfileStringA
GetPrivateProfileIntA
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
SetThreadPriority
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
FreeResource
GetCurrentThreadId
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetModuleFileNameA
GetFullPathNameA
lstrcpyA
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
SetLastError
GlobalFree
MulDiv
lstrcpynA
GetCurrentProcess
GetCurrentThread
GetCurrentProcessId
LoadLibraryA
FreeLibrary
lstrcatA
InterlockedDecrement
GetFileAttributesA
CreateDirectoryA
ReadFile
GetFileInformationByHandle
CopyFileA
FormatMessageA
LocalFree
GetCommandLineA
OutputDebugStringA
CompareStringW
CompareStringA
lstrlenA
GetVersion
MultiByteToWideChar
FindClose
FindFirstFileA
DeleteFileA
GetUserDefaultLangID
CreateFileA
WriteFile
CloseHandle
Sleep
WinExec
WideCharToMultiByte
ResumeThread
GetModuleHandleA
GetProcAddress
GetSystemInfo
lstrcmpiA
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CreateMutexA
GetLastError
ReleaseMutex
GetCurrentDirectoryA
GetVolumeInformationA
GlobalAlloc
GlobalLock
GlobalUnlock
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
GlobalGetAtomNameA
TlsAlloc
GetStartupInfoA
user32
IsRectEmpty
SetRect
MessageBeep
CharNextA
DestroyMenu
GetSysColorBrush
WindowFromPoint
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetWindowContextHelpId
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
GetMessageA
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
SetCursor
PostQuitMessage
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
IsWindowEnabled
ShowWindow
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
CloseClipboard
SetClipboardData
OpenClipboard
EnableWindow
GetWindowRect
GetSystemMetrics
PostMessageA
GetClientRect
SetTimer
SendMessageA
KillTimer
CharUpperA
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
GetClassInfoA
RegisterClassA
UnregisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
CopyAcceleratorTableA
PostThreadMessageA
SetWindowPos
OffsetRect
IntersectRect
IsIconic
GetWindowPlacement
CopyRect
PtInRect
GetWindow
GetMenuState
GetMenuItemID
RegisterClipboardFormatA
GetNextDlgGroupItem
InvalidateRgn
IsChild
LoadBitmapA
GetDC
ReleaseDC
GetParent
SetWindowTextA
MoveWindow
InvalidateRect
LoadCursorA
SetClassLongA
SetCapture
LoadIconA
SystemParametersInfoA
ReleaseCapture
GetWindowLongA
DrawIconEx
wsprintfA
MessageBoxA
GetSubMenu
GetMenuItemCount
MapDialogRect
gdi32
ExtSelectClipRgn
DeleteDC
GetStockObject
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
BitBlt
Ellipse
SelectObject
CreateCompatibleDC
GetObjectA
CreateCompatibleBitmap
CreateFontA
CreateSolidBrush
CreatePen
GetViewportExtEx
DeleteObject
MoveToEx
LineTo
SetMapMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
StretchBlt
GetWindowExtEx
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegCloseKey
shell32
Shell_NotifyIconA
SHGetSpecialFolderLocation
DragFinish
DragQueryFileA
DragAcceptFiles
SHGetPathFromIDListA
comctl32
_TrackMouseEvent
ord17
shlwapi
PathIsDirectoryA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathFindFileNameA
PathSearchAndQualifyA
oledlg
ord8
ole32
CLSIDFromProgID
CoGetClassObject
CoInitialize
OleRun
CoCreateInstance
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
oleaut32
SysFreeString
VariantInit
VariantCopy
VariantClear
VariantChangeType
SysStringLen
SysAllocStringLen
SysStringByteLen
SafeArrayDestroy
SystemTimeToVariantTime
OleCreateFontIndirect
GetErrorInfo
SysAllocStringByteLen
SysAllocString
wininet
InternetConnectA
HttpSendRequestA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
HttpOpenRequestA
InternetCloseHandle
HttpQueryInfoA
InternetQueryDataAvailable
InternetGetLastResponseInfoA
Sections
.text Size: 236KB - Virtual size: 235KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 832KB - Virtual size: 829KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ