Static task
static1
Behavioral task
behavioral1
Sample
4ca61b324a0ceba109b4dd95053526cb_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4ca61b324a0ceba109b4dd95053526cb_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4ca61b324a0ceba109b4dd95053526cb_JaffaCakes118
-
Size
579KB
-
MD5
4ca61b324a0ceba109b4dd95053526cb
-
SHA1
bebc8dec0fc3946d28cc8bfa627f9946c650c09e
-
SHA256
7b112c2e8fb90e7d37fb8c85d45dd69784e50ccf2ecadda42641d8e5a85a09a8
-
SHA512
f63674c83404b1e0a7f14ff3d36e68ca2016735e57085c203bdf63465338fe41ebb441591492a3ad667775de8656604594ab290163bf7b230a8c033a4b627346
-
SSDEEP
6144:rcII6pV7zXp0xUTzHtgVL+IcUh8ZBodUU2jrFMJbW07un4h8MGQv0+WTZ+XKu5hx:dI6mqzNgV3cUmZBs2jRMRJ7uvJKK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4ca61b324a0ceba109b4dd95053526cb_JaffaCakes118
Files
-
4ca61b324a0ceba109b4dd95053526cb_JaffaCakes118.exe windows:4 windows x86 arch:x86
86d9b934cf86b45b9ae1b13bbef139a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCreateUrlA
DeleteUrlCacheGroup
ReadUrlCacheEntryStream
InternetSetOptionA
GetUrlCacheConfigInfoA
UnlockUrlCacheEntryFileW
InternetSetFilePointer
UrlZonesDetach
FtpGetCurrentDirectoryW
InternetAutodial
FtpCreateDirectoryW
InternetHangUp
FtpGetFileEx
FindFirstUrlCacheContainerA
InternetUnlockRequestFile
InternetReadFileExW
CreateUrlCacheEntryW
SetUrlCacheEntryGroupA
FtpOpenFileW
FindNextUrlCacheEntryExW
InternetSecurityProtocolToStringA
DeleteIE3Cache
GopherGetLocatorTypeA
InternetShowSecurityInfoByURLA
InternetSetDialState
HttpSendRequestA
FtpFindFirstFileA
GetUrlCacheEntryInfoExW
FindFirstUrlCacheEntryExW
FreeUrlCacheSpaceW
SetUrlCacheConfigInfoA
InternetTimeToSystemTime
InternetCanonicalizeUrlW
InternetAutodialHangup
InternetCheckConnectionW
InternetGoOnline
InternetCloseHandle
FtpRemoveDirectoryW
InternetGetLastResponseInfoW
HttpQueryInfoW
InternetAlgIdToStringW
InternetGetConnectedStateExA
ShowCertificate
InternetSecurityProtocolToStringW
FindNextUrlCacheEntryW
FindFirstUrlCacheGroup
SetUrlCacheEntryGroupW
GopherOpenFileA
FtpRenameFileA
InternetConnectA
InternetSetDialStateA
UpdateUrlCacheContentPath
FtpCommandW
InternetGetCookieA
HttpOpenRequestW
FtpGetFileA
FtpSetCurrentDirectoryA
InternetQueryOptionW
InternetOpenW
InternetShowSecurityInfoByURLW
GetUrlCacheGroupAttributeW
FtpPutFileA
FtpSetCurrentDirectoryW
InternetReadFileExA
SetUrlCacheHeaderData
FtpGetFileW
LoadUrlCacheContent
InternetQueryFortezzaStatus
FtpOpenFileA
CreateUrlCacheEntryA
InternetGetConnectedStateExW
gdi32
CreateMetaFileW
GetCharacterPlacementW
ExtSelectClipRgn
GetCharABCWidthsA
SetWindowOrgEx
EndDoc
GetGlyphOutline
CreateEllipticRgn
GetStretchBltMode
CreatePen
EnumMetaFile
DPtoLP
OffsetClipRgn
GetTextExtentExPointA
CancelDC
GetSystemPaletteEntries
CopyEnhMetaFileA
PatBlt
GetGraphicsMode
CreateDCA
EnumFontFamiliesW
SetMiterLimit
GetDCOrgEx
SetPolyFillMode
Rectangle
CreateDIBitmap
GetTextExtentExPointW
ResetDCW
UpdateICMRegKeyA
GetClipBox
wsock32
gethostbyname
htonl
ioctlsocket
bind
inet_ntoa
ord1141
WSAGetLastError
WSAAsyncGetProtoByNumber
ord1109
ord1119
ord1116
ord1117
WSAIsBlocking
WEP
user32
DdeConnectList
ToUnicode
ShowScrollBar
GetClassNameA
UnregisterClassW
GetMessageExtraInfo
GetCaretPos
RegisterWindowMessageW
DefDlgProcW
RegisterClassExA
SetCursor
GetNextDlgTabItem
WinHelpW
OpenWindowStationW
GetMenuContextHelpId
ReplyMessage
ShowOwnedPopups
RegisterClassA
GetClipboardOwner
EndDialog
SetScrollRange
GetMessagePos
LoadMenuIndirectW
CreateDialogParamW
GetMenuItemInfoW
DdeQueryConvInfo
EnumClipboardFormats
ChangeMenuA
SetWindowsHookExA
CallWindowProcW
KillTimer
GetSubMenu
GetActiveWindow
DdeAddData
EnumDesktopsW
CreateAcceleratorTableW
LockWindowUpdate
PostQuitMessage
GetMessageTime
DdeUninitialize
CopyAcceleratorTableA
CreateDialogIndirectParamA
WINNLSGetIMEHotkey
SetRectEmpty
GetKeyNameTextW
MessageBoxA
ScrollDC
DdeFreeDataHandle
MapWindowPoints
DeferWindowPos
CharToOemBuffA
SetWindowContextHelpId
LoadAcceleratorsA
CopyAcceleratorTableW
RegisterClassW
CheckMenuItem
PaintDesktop
DdeNameService
ToAscii
SystemParametersInfoA
MapDialogRect
FlashWindowEx
GetScrollRange
DdeSetQualityOfService
GetParent
DdeInitializeA
GetTitleBarInfo
GetClipboardFormatNameA
EnableScrollBar
CountClipboardFormats
InsertMenuW
EnumDisplaySettingsA
DdeCreateStringHandleA
DestroyCursor
CharToOemW
GetClassWord
CopyImage
TranslateMDISysAccel
BroadcastSystemMessageW
GetWindow
PostMessageA
GetUserObjectInformationW
UnpackDDElParam
ImpersonateDdeClientWindow
EnumDesktopWindows
DispatchMessageA
ChangeDisplaySettingsA
SetCapture
CharUpperBuffW
IsIconic
CharUpperW
MonitorFromWindow
CascadeWindows
PackDDElParam
SetForegroundWindow
CreateDialogIndirectParamW
GetKBCodePage
MessageBeep
MessageBoxExW
ValidateRect
CreateWindowExA
SetWindowTextW
GetDCEx
RegisterDeviceNotificationA
IsDialogMessage
IsCharLowerA
SetWindowsHookExW
GetMenuStringW
DdeClientTransaction
CharNextA
EnumPropsExW
GetDesktopWindow
ExcludeUpdateRgn
PeekMessageW
GetClassInfoA
MapVirtualKeyA
SetActiveWindow
DdeQueryStringW
SetCaretPos
DefFrameProcA
RegisterWindowMessageA
GetClipboardViewer
EqualRect
RealGetWindowClass
GetWindowInfo
SubtractRect
DlgDirSelectExA
SetShellWindow
InSendMessage
CloseWindow
DdeAbandonTransaction
ReuseDDElParam
SetUserObjectInformationA
CallMsgFilter
GetQueueStatus
GetClientRect
GetLastActivePopup
SetWindowPlacement
OemToCharBuffW
GetPropA
DdeQueryNextServer
UnregisterClassA
SetRect
SendDlgItemMessageW
DdeAccessData
SetProcessWindowStation
SetMenuDefaultItem
IsDialogMessageW
CreateMDIWindowA
SetDoubleClickTime
EndDeferWindowPos
GetCursorPos
ScrollWindowEx
ScreenToClient
DlgDirSelectComboBoxExA
SendDlgItemMessageA
InvalidateRgn
IsCharAlphaNumericW
OemToCharW
SetClassWord
DestroyAcceleratorTable
GetKeyboardLayout
SetMenuItemInfoW
InvertRect
SetWindowsHookA
TileChildWindows
InsertMenuA
DrawCaption
CheckMenuRadioItem
GetUpdateRect
PostThreadMessageA
SetDlgItemTextW
DragDetect
DdeQueryStringA
FindWindowA
GetAncestor
SetLastErrorEx
DrawAnimatedRects
GetKeyboardLayoutList
GetMessageW
ClipCursor
DdeCreateStringHandleW
IsZoomed
ModifyMenuA
EnableWindow
GetClipboardData
CopyRect
CreateIconFromResourceEx
DestroyIcon
TrackPopupMenu
EnumWindowStationsA
TrackMouseEvent
GetThreadDesktop
OpenDesktopA
GetProcessDefaultLayout
DialogBoxIndirectParamW
DestroyCaret
CascadeChildWindows
UnregisterDeviceNotification
SendMessageTimeoutA
DialogBoxParamA
SwapMouseButton
ShowCaret
CharPrevExA
AnimateWindow
IsWindowVisible
SetWindowLongA
GetComboBoxInfo
DeleteMenu
LoadCursorFromFileW
GetAltTabInfo
DialogBoxParamW
GetDlgItemTextA
EndPaint
DestroyWindow
GetScrollBarInfo
AdjustWindowRect
IsCharAlphaW
DdeGetLastError
DdeKeepStringHandle
LoadMenuW
FindWindowW
SendMessageTimeoutW
GetFocus
DefMDIChildProcA
CallWindowProcA
EnumPropsA
IsCharUpperA
SendNotifyMessageW
GetMenuCheckMarkDimensions
LookupIconIdFromDirectoryEx
GetMenuState
SetScrollPos
SwitchToThisWindow
GetForegroundWindow
RegisterClipboardFormatA
EnumPropsExA
DdeCmpStringHandles
ChangeMenuW
ActivateKeyboardLayout
SendIMEMessageExA
SetClassLongA
RegisterHotKey
RemovePropA
SetMenuItemInfoA
GetMenuItemCount
MonitorFromPoint
GetIconInfo
ChangeDisplaySettingsW
VkKeyScanExW
CharLowerW
LoadCursorA
SetTimer
SetWindowsHookW
DefMDIChildProcW
MenuItemFromPoint
GetClassInfoW
DragObject
GetWindowModuleFileNameA
SetDeskWallpaper
ChangeDisplaySettingsExA
BroadcastSystemMessage
OpenClipboard
GetWindowLongW
GetGUIThreadInfo
GetDlgCtrlID
CreateCursor
GetGuiResources
TileWindows
WindowFromPoint
GetScrollInfo
CreatePopupMenu
InsertMenuItemW
SetPropA
InternalGetWindowText
ToUnicodeEx
MapVirtualKeyExA
AnyPopup
IntersectRect
DrawMenuBar
GetWindowModuleFileNameW
MessageBoxW
CloseDesktop
DdeDisconnect
WINNLSGetEnableStatus
PostThreadMessageW
CharLowerBuffA
SendMessageW
GetWindowLongA
GetClassNameW
EmptyClipboard
GetWindowThreadProcessId
GetWindowDC
SwitchDesktop
CallMsgFilterW
CharToOemA
OpenDesktopW
GetCapture
GetKeyState
ScrollWindow
DlgDirListW
AppendMenuW
GetUserObjectInformationA
FillRect
CreateIconIndirect
GetDialogBaseUnits
IsCharUpperW
EnableMenuItem
SendMessageA
DefDlgProcA
DlgDirSelectExW
SetWindowWord
LoadAcceleratorsW
SendInput
HideCaret
UnhookWinEvent
DrawEdge
WINNLSEnableIME
DdeConnect
EnumDesktopsA
CreateIcon
GetCursorInfo
GetDlgItemTextW
EnumDisplayDevicesW
UnloadKeyboardLayout
LoadMenuA
SetMessageQueue
GetTabbedTextExtentA
GetClassLongA
SetMenu
MessageBoxIndirectA
LoadStringW
IsWindowEnabled
OemKeyScan
ClientToScreen
DdeDisconnectList
LoadImageW
FindWindowExA
InvalidateRect
GetMenuItemRect
MonitorFromRect
SetUserObjectSecurity
CharToOemBuffW
EndTask
IsCharAlphaA
MapVirtualKeyW
SetKeyboardState
SetUserObjectInformationW
UnhookWindowsHookEx
GetMenuItemID
VkKeyScanW
MsgWaitForMultipleObjects
SetDlgItemTextA
IsClipboardFormatAvailable
LoadKeyboardLayoutW
ArrangeIconicWindows
FreeDDElParam
GetKeyboardType
RemovePropW
DrawTextA
BroadcastSystemMessageA
GetCursor
WaitForInputIdle
GetClipboardFormatNameW
GetKeyboardLayoutNameA
DdePostAdvise
CreateIconFromResource
GetOpenClipboardWindow
GetWindowTextW
SetDebugErrorLevel
GetPriorityClipboardFormat
EnumDisplayMonitors
EnumDisplayDevicesA
GetScrollPos
DrawIcon
SetCaretBlinkTime
wsprintfA
ToAsciiEx
DrawTextW
GetSysColor
SetClipboardData
shell32
ExtractAssociatedIconW
ExtractIconW
SHUpdateRecycleBinIcon
SHGetInstanceExplorer
SHGetSpecialFolderLocation
SHGetNewLinkInfo
DoEnvironmentSubstA
SHGetDataFromIDListW
DragFinish
SHAppBarMessage
FreeIconList
FindExecutableA
SHGetPathFromIDListA
RealShellExecuteW
SheSetCurDrive
SHEmptyRecycleBinW
DragQueryFile
SHGetMalloc
ExtractAssociatedIconA
ShellExecuteW
ShellExecuteEx
SHBrowseForFolder
DragQueryFileA
DragAcceptFiles
ShellExecuteA
ShellAboutW
CheckEscapesW
ShellHookProc
ExtractIconExW
SHGetDiskFreeSpaceA
ShellExecuteExA
ExtractAssociatedIconExA
SHGetPathFromIDListW
SHInvokePrinterCommandA
SHFormatDrive
RealShellExecuteA
ExtractIconExA
SHBrowseForFolderW
SHInvokePrinterCommandW
SHFileOperationW
SHGetSpecialFolderPathW
SHGetPathFromIDList
SheChangeDirExW
DragQueryPoint
SheGetDirA
SHFreeNameMappings
DuplicateIcon
CommandLineToArgvW
SHGetSpecialFolderPathA
DragQueryFileW
SHChangeNotify
InternalExtractIconListW
ExtractIconEx
FindExecutableW
comdlg32
GetFileTitleW
PrintDlgW
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameW
PrintDlgA
PageSetupDlgA
LoadAlterBitmap
ChooseFontW
ChooseFontA
ReplaceTextW
ChooseColorA
GetOpenFileNameA
GetSaveFileNameW
FindTextW
ChooseColorW
FindTextA
ReplaceTextA
advapi32
LogonUserA
RegQueryValueW
RegQueryValueExA
StartServiceA
CryptDuplicateHash
RegEnumValueA
RegQueryMultipleValuesA
StartServiceW
InitiateSystemShutdownA
CryptDestroyHash
RegRestoreKeyW
CryptSignHashW
CryptGetDefaultProviderA
CryptSetProviderA
CryptDestroyKey
CryptSetHashParam
ReportEventA
CryptEnumProviderTypesA
LookupPrivilegeNameW
DuplicateToken
CryptDeriveKey
RegConnectRegistryW
CryptEnumProviderTypesW
RegEnumKeyW
RegSaveKeyW
RegRestoreKeyA
InitializeSecurityDescriptor
LookupAccountNameA
RegCreateKeyW
CryptSetProviderW
Sections
.text Size: 269KB - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 176KB - Virtual size: 175KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE