Static task
static1
Behavioral task
behavioral1
Sample
4988826f1c5fedee52673d00c1d2b2fd_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4988826f1c5fedee52673d00c1d2b2fd_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4988826f1c5fedee52673d00c1d2b2fd_JaffaCakes118
-
Size
332KB
-
MD5
4988826f1c5fedee52673d00c1d2b2fd
-
SHA1
63ccb5894b8c1f2b085010bea66e7daeb0bdc98c
-
SHA256
90e9c368c40d15f1a663387d60554076d400d54cc82c64e59f7ffec1dcfba22d
-
SHA512
04b4149d6e35cb327749cf33c03a8aa4d20e8590645b1b93765d3aff803a1c782f64eb0a533b6eab93f036e69c2223f3729d29c33c5d4ab66505eb29a1c91bdf
-
SSDEEP
6144:BjuME7AP3poNYXTea4oseFaIv857nNbNm4hymq9FwEsyP0c8N29NetXr:BCrAfiaXTepod1vcntytsbcb9N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4988826f1c5fedee52673d00c1d2b2fd_JaffaCakes118
Files
-
4988826f1c5fedee52673d00c1d2b2fd_JaffaCakes118.exe windows:5 windows x86 arch:x86
64bf55ca2cd0548dd580e18d3afa082d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHChangeNotify
ExtractIconW
ExtractAssociatedIconExW
ShellAboutW
SHGetSpecialFolderLocation
ShellExecuteA
ShellExecuteExW
ExtractIconExW
SHGetSpecialFolderPathW
SHSetLocalizedName
SHGetFolderLocation
ShellExecuteW
SHGetPathFromIDListA
Shell_NotifyIconA
SHBrowseForFolderW
SHFileOperationW
SHGetFileInfoW
Shell_NotifyIconW
SHPathPrepareForWriteW
SHGetDesktopFolder
SHGetFolderPathAndSubDirW
SHAppBarMessage
SHCreateShellItem
SHGetInstanceExplorer
SHGetFolderPathW
SHGetDataFromIDListW
DragQueryFileW
SHBindToParent
SHGetPathFromIDListW
ntdll
NtAllocateVirtualMemory
LdrGetDllHandle
RtlUshortByteSwap
user32
FindWindowExW
IsRectEmpty
MessageBeep
ScreenToClient
EnumWindows
DialogBoxParamW
AdjustWindowRectEx
GetLastActivePopup
GetWindowRect
AdjustWindowRect
EnumDisplaySettingsW
SetCapture
SetParent
DdeFreeDataHandle
CreatePopupMenu
PostMessageW
IsChild
DdeCreateDataHandle
SetDlgItemInt
LoadCursorW
GetAsyncKeyState
MessageBoxExW
BeginPaint
GetDC
CopyRect
CallMsgFilterW
DdeDisconnect
EnumDesktopWindows
SendMessageTimeoutW
GetWindowPlacement
FillRect
DefWindowProcW
SetWindowsHookExW
SetForegroundWindow
IsWindowVisible
DdeInitializeW
GetShellWindow
MapDialogRect
IsWindowEnabled
OffsetRect
DrawFocusRect
DestroyWindow
DdeCreateStringHandleW
CreateIconIndirect
CheckMenuRadioItem
SetWindowTextW
PostMessageA
GetForegroundWindow
GetScrollInfo
GetMessagePos
LoadImageW
MapVirtualKeyW
EndDeferWindowPos
GetFocus
GetCapture
GetMenuItemCount
SetScrollInfo
SetClipboardViewer
DestroyIcon
PostThreadMessageW
PtInRect
AttachThreadInput
GetSystemMenu
GetWindowRgnBox
ShowScrollBar
KillTimer
UnionRect
GetDlgItem
RegisterClipboardFormatW
SendDlgItemMessageW
SetClipboardData
DrawEdge
GetSystemMetrics
ShowCaret
ChangeClipboardChain
BeginDeferWindowPos
GetClassNameW
DdeConnect
GetWindowTextW
GetClassInfoW
CallWindowProcW
ReleaseCapture
DrawIconEx
PostQuitMessage
PeekMessageA
GetSubMenu
VkKeyScanExW
LoadCursorA
DdeGetData
RedrawWindow
GetMessageTime
UnhookWindowsHookEx
DrawTextW
CloseClipboard
WindowFromPoint
IntersectRect
DdeQueryStringW
ShowOwnedPopups
IsDlgButtonChecked
GetNextDlgTabItem
SetWindowRgn
MsgWaitForMultipleObjectsEx
SetCursorPos
RemoveMenu
DdeFreeStringHandle
ChildWindowFromPoint
GetClassLongW
GetWindowInfo
DispatchMessageW
GetClipboardData
SetWindowLongW
SendMessageW
SetWindowPlacement
GetAncestor
GetKeyNameTextW
SetDlgItemTextW
GetMenuItemID
TrackPopupMenuEx
MonitorFromRect
PostThreadMessageA
CharLowerBuffW
SetWindowLongA
AllowSetForegroundWindow
TrackMouseEvent
CopyImage
GetClassWord
InvalidateRect
SetMenuDefaultItem
DrawTextExW
GetMenuItemInfoA
SendMessageTimeoutA
SendMessageA
RemovePropW
GetSysColorBrush
DialogBoxIndirectParamW
GetMenuItemInfoW
GetProcessWindowStation
TrackPopupMenu
FindWindowW
GetMonitorInfoW
SetWindowPos
DialogBoxParamA
GetComboBoxInfo
MapWindowPoints
GetDesktopWindow
GetMessageA
GetIconInfo
GetDlgItemTextW
SystemParametersInfoA
EnumChildWindows
WaitMessage
CreateWindowExW
CreateMenu
SetActiveWindow
WaitForInputIdle
DeleteMenu
MoveWindow
GetClientRect
LoadAcceleratorsW
GetDlgCtrlID
CheckRadioButton
EndDialog
EnumThreadWindows
FindWindowA
RegisterWindowMessageA
NotifyWinEvent
GetLastInputInfo
SetScrollPos
EndPaint
CharUpperW
GetDoubleClickTime
GetWindowDC
GetKeyState
GetPropW
IsWindow
GetMenuState
DialogBoxIndirectParamA
DeferWindowPos
TranslateAcceleratorW
GetMenuDefaultItem
HideCaret
IsHungAppWindow
IsDialogMessageW
GetCursor
EndMenu
DestroyMenu
GetTopWindow
AnimateWindow
DefWindowProcA
GetCursorPos
RemovePropA
SetPropA
LoadIconW
MonitorFromWindow
CharPrevA
IsCharAlphaNumericW
OpenClipboard
ClientToScreen
PeekMessageW
GetWindowThreadProcessId
TranslateMessage
InsertMenuW
SetRect
IsIconic
SystemParametersInfoW
EmptyClipboard
CharLowerW
GetKeyboardLayout
UpdateLayeredWindow
IsMenu
SetFocus
AppendMenuW
DrawFrameControl
RegisterClassW
DdeNameService
SetPropW
CharNextA
EnableMenuItem
SetTimer
LoadStringA
ShowWindow
GetWindowLongW
IsWindowUnicode
WinHelpW
RegisterClassExW
DestroyAcceleratorTable
GetActiveWindow
DdeUninitialize
SetCursor
UnregisterClassW
InflateRect
LockSetForegroundWindow
GetWindowLongA
EqualRect
SetRectEmpty
MonitorFromPoint
SetMenu
MessageBoxW
CharPrevW
GetPropA
GetClipboardFormatNameW
DispatchMessageA
GetClassInfoExW
MessageBoxIndirectA
RegisterClipboardFormatA
LoadBitmapW
GetWindow
RegisterWindowMessageW
GetParent
CopyIcon
wsprintfW
ReleaseDC
SetMenuItemInfoW
GetWindowTextLengthW
CharNextW
GetDialogBaseUnits
GetMenuStringW
SetMenuItemBitmaps
LoadMenuW
InsertMenuItemW
CallNextHookEx
LoadStringW
DdeClientTransaction
GetMessageW
CheckMenuItem
MessageBoxIndirectW
CheckDlgButton
CreateDialogParamW
EnableWindow
UpdateWindow
MsgWaitForMultipleObjects
GetSysColor
SendNotifyMessageW
MessageBoxExA
kernel32
HeapReAlloc
FileTimeToLocalFileTime
VirtualProtect
ResumeThread
SetThreadContext
MulDiv
GetCurrentDirectoryW
lstrcmpW
GetThreadContext
GetFileAttributesW
GetCurrentProcessId
GetEnvironmentVariableW
DeleteTimerQueueTimer
GlobalUnlock
SetCurrentDirectoryW
EnumUILanguagesW
GlobalDeleteAtom
HeapAlloc
GetSystemTime
GetFullPathNameW
GetVersion
EnterCriticalSection
GetLastError
CreateEventW
LocalFileTimeToFileTime
VirtualQuery
CreateMutexA
InterlockedIncrement
VirtualAlloc
GetTickCount
ReplaceFileW
SearchPathW
LocalSize
SetFilePointerEx
FreeLibrary
FileTimeToSystemTime
TryEnterCriticalSection
GlobalAddAtomW
TlsGetValue
GetFileAttributesA
CreateFileA
CreateDirectoryW
DebugBreak
GetTempPathW
DisableThreadLibraryCalls
SetThreadExecutionState
SystemTimeToFileTime
QueryPerformanceCounter
SetThreadPriority
GetCurrentThreadId
UnhandledExceptionFilter
lstrcmpA
Process32FirstW
LCMapStringW
SizeofResource
WritePrivateProfileSectionW
ReleaseActCtx
GetNumberFormatW
GetSystemTimeAsFileTime
GetSystemDirectoryA
SetCurrentDirectoryA
SetFileTime
SetUnhandledExceptionFilter
GetAtomNameW
CopyFileW
TerminateThread
LeaveCriticalSection
SetEnvironmentVariableW
MapViewOfFile
OpenMutexA
OpenProcess
InterlockedDecrement
LocalFree
GetLocaleInfoW
GetCurrentThread
InterlockedCompareExchange
GetThreadLocale
MoveFileExW
GlobalReAlloc
CompareStringA
CreateFileW
TlsSetValue
GetSystemWow64DirectoryW
AddAtomW
GetCurrentProcess
lstrcmpiW
DeleteAtom
Process32NextW
GetLocalTime
GetSystemDefaultLCID
DeleteCriticalSection
LocalReAlloc
ReleaseMutex
CompareStringW
GetModuleHandleA
GetVersionExA
CreateActCtxW
CloseHandle
GetDateFormatW
Sleep
GetModuleHandleW
lstrlenW
WideCharToMultiByte
GetThreadPriority
HeapCreate
VirtualFree
ActivateActCtx
CreateSemaphoreW
GetLongPathNameW
GetWindowsDirectoryW
TlsFree
WriteFile
GetFileInformationByHandle
FindFirstFileW
TerminateProcess
GlobalAlloc
CreateFileMappingW
CreateFileMappingA
SetFileAttributesW
GetFileAttributesExW
WritePrivateProfileStringW
GetSystemInfo
WaitForSingleObject
RemoveDirectoryW
FindClose
MultiByteToWideChar
FindResourceExW
OpenMutexW
RaiseException
ReleaseSemaphore
FormatMessageW
SetFilePointer
DeactivateActCtx
lstrlenA
FindAtomW
GetPrivateProfileStringW
SetEndOfFile
InitializeCriticalSectionAndSpinCount
GetModuleHandleExA
GlobalAddAtomA
ExitProcess
ResetEvent
ExpandEnvironmentStringsW
GetExitCodeThread
GetPrivateProfileSectionW
GetFileSizeEx
WaitForMultipleObjects
lstrcmpiA
CreateMutexW
SetLastError
GlobalFree
HeapFree
CreateThread
FreeLibraryAndExitThread
GlobalFlags
TlsAlloc
GetModuleHandleExW
GetProcessHeap
GetACP
GetFileSize
DuplicateHandle
CreateProcessW
IsWow64Process
GetShortPathNameW
LockResource
GlobalLock
ReadFile
CreateEventA
SuspendThread
GlobalSize
GetSystemDirectoryW
WaitForSingleObjectEx
LoadLibraryExW
DeleteFileW
QueryDosDeviceW
OutputDebugStringA
SetProcessWorkingSetSize
InitializeCriticalSection
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetModuleFileNameW
UnlockFileEx
LoadLibraryA
ExpandEnvironmentStringsA
LoadLibraryW
CreateDirectoryA
MoveFileW
FindResourceW
FlushInstructionCache
GetModuleFileNameA
GetUserDefaultLCID
GetTempFileNameW
GetCPInfo
UnmapViewOfFile
QueueUserWorkItem
GetLogicalDriveStringsW
GetProcAddress
HeapDestroy
CreateToolhelp32Snapshot
SetEvent
LoadResource
QueryPerformanceFrequency
LockFileEx
CompareFileTime
SetErrorMode
InterlockedExchange
SetProcessShutdownParameters
CreateTimerQueueTimer
GetVersionExW
GetTimeFormatW
IsDBCSLeadByte
GetPrivateProfileSectionNamesW
GetPrivateProfileStringA
FindNextFileW
OpenEventW
LocalAlloc
uxtheme
DrawThemeBackground
IsThemeActive
CloseThemeData
DrawThemeParentBackground
GetThemeMetric
GetThemeColor
GetThemePartSize
SetWindowTheme
GetThemeBackgroundExtent
OpenThemeData
GetThemeAppProperties
GetThemeFont
GetThemeMargins
IsAppThemed
GetThemeBackgroundContentRect
advapi32
UnregisterTraceGuids
GetTraceEnableLevel
TraceMessage
ConvertSidToStringSidW
GetTraceLoggerHandle
RegQueryValueExA
ConvertStringSidToSidW
RegQueryInfoKeyW
RegSetValueExA
RegDeleteValueA
RegCreateKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCreateKeyExA
CryptGetHashParam
RegEnumValueW
RegEnumKeyExW
TraceEvent
RegSetValueExW
RegOpenCurrentUser
SetTokenInformation
GetTokenInformation
SetThreadToken
CreateProcessAsUserW
GetTraceEnableFlags
RegQueryValueW
CryptHashData
RegEnumKeyW
DuplicateTokenEx
CryptDestroyHash
GetUserNameW
RegCloseKey
CryptAcquireContextW
ImpersonateSelf
RegDeleteKeyW
RegDeleteValueW
RegQueryValueExW
RegCreateKeyA
RegEnumValueA
RegOpenKeyExA
CryptReleaseContext
IsTextUnicode
RegOpenKeyW
RegDeleteKeyA
RegisterTraceGuidsW
GetLengthSid
OpenProcessToken
OpenThreadToken
RegOpenKeyExW
CryptCreateHash
gdi32
GetGlyphIndicesW
CreatePolygonRgn
GetDeviceCaps
SetStretchBltMode
SetTextColor
GetClipBox
BitBlt
GetPixel
CloseEnhMetaFile
GetObjectW
GetRegionData
OffsetRgn
CloseMetaFile
SetPaletteEntries
CreateDIBPatternBrushPt
GetSystemPaletteEntries
PatBlt
CreatePen
SetBrushOrgEx
SetLayout
GetObjectA
CreateSolidBrush
GetDCOrgEx
SetWindowExtEx
CreateRectRgn
DeleteObject
SetViewportExtEx
DeleteEnhMetaFile
RectVisible
IntersectClipRect
CreateCompatibleBitmap
TextOutW
ExtTextOutW
SelectObject
GetTextCharset
SetWindowOrgEx
Rectangle
RestoreDC
SetBkMode
LPtoDP
CreateCompatibleDC
CreateHalftonePalette
TextOutA
GetLayout
CreateFontW
LineTo
RealizePalette
GetTextExtentExPointI
CreateDIBSection
SelectPalette
SetTextAlign
CreateFontIndirectA
CreateMetaFileW
GetTextExtentPoint32A
PlayEnhMetaFile
CreateFontIndirectW
CombineRgn
SetRectRgn
DeleteDC
OffsetWindowOrgEx
GetBkMode
MoveToEx
EqualRgn
CreatePatternBrush
StretchDIBits
CreatePalette
SetMapMode
CreateRectRgnIndirect
GetBrushOrgEx
CreateDCW
GetTextAlign
SetBkColor
StretchBlt
SetDCPenColor
CreateEnhMetaFileA
GetTextExtentPointW
CreateBitmap
GetTextColor
GetRgnBox
GetStockObject
SetViewportOrgEx
SaveDC
GetTextMetricsW
GetDIBits
ExtCreateRegion
GetTextExtentPoint32W
GetBkColor
GetPaletteEntries
CreateDCA
psapi
GetProcessImageFileNameW
Sections
.text Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE