Static task
static1
Behavioral task
behavioral1
Sample
63856ec8e159253646e747559bed19b4_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
63856ec8e159253646e747559bed19b4_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
63856ec8e159253646e747559bed19b4_JaffaCakes118
-
Size
1.9MB
-
MD5
63856ec8e159253646e747559bed19b4
-
SHA1
20d29b990a5975270ab30ba66b931dbb42bd9d6a
-
SHA256
4393237b8171a77c311c179ca9c06587e762cd63cd56cf9c2ffa5b7ee2f1580b
-
SHA512
b928527957d934d23bbfa5c2cac237c209f4346d20968c1a2ae2d0caf6c607032203ced4918fea3eed4700d30600b34e579757e392030cd2d078ab799d8aac22
-
SSDEEP
24576:ZmulHaqt+1Op5gEnRxWyZcYyHbt6Psm5SNabowJwcAvAuY2wJ4WbyiUFeB2Za2T:cgbXWoypNAShW2wJ/+iUkB+akI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 63856ec8e159253646e747559bed19b4_JaffaCakes118
Files
-
63856ec8e159253646e747559bed19b4_JaffaCakes118.exe windows:4 windows x86 arch:x86
5c0ee88535526d70f4b65ed913c9bf2e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
fgbtcore
ord6
ord38
ord19
ord15
ord22
ord17
ord1
ord39
ord37
ord2
ord35
ord7
ord9
ord11
ord24
ord25
ord33
ord34
ord29
ord26
ord30
ord27
ord5
ord28
ord13
ord18
ord12
ord32
ord14
ord16
winmm
PlaySoundA
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
advapi32
AdjustTokenPrivileges
GetFileSecurityA
RegDeleteValueA
RegQueryValueExA
RegCreateKeyA
RegEnumKeyA
RegQueryValueA
RegOpenKeyA
RegSetValueA
RegSetValueExA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
OpenProcessToken
LookupPrivilegeValueA
SetFileSecurityA
RegOpenKeyExA
RegCloseKey
netapi32
Netbios
fgemcore
ord100
ord101
kernel32
LocalReAlloc
TlsGetValue
lstrlenW
GetTempFileNameA
GetDiskFreeSpaceA
CreateSemaphoreA
ReleaseSemaphore
WaitForMultipleObjects
SetErrorMode
GetProcessVersion
FindResourceExA
GlobalFlags
GetCPInfo
GetOEMCP
RtlUnwind
HeapAlloc
HeapFree
GetTimeZoneInformation
GetLocalTime
HeapReAlloc
TerminateProcess
GetACP
GetStartupInfoA
GetCommandLineA
RaiseException
HeapSize
SetStdHandle
GetFileType
FatalAppExitA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetConsoleCtrlHandler
GetStdHandle
LCMapStringA
LCMapStringW
CompareStringW
SetHandleCount
UnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetDriveTypeA
IsBadCodePtr
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
SetEnvironmentVariableA
GetLocaleInfoW
GetProfileStringA
UnmapViewOfFile
MapViewOfFile
GetSystemInfo
CreateFileMappingA
CloseHandle
GetFileSize
CreateFileA
ResumeThread
CreateThread
WaitForSingleObject
Sleep
GetTickCount
ExitThread
IsBadReadPtr
MultiByteToWideChar
WideCharToMultiByte
GetFileAttributesA
GetProcAddress
LoadLibraryA
FreeLibrary
GetModuleHandleA
GetVolumeInformationA
GetModuleFileNameA
CopyFileA
FindNextFileA
FindClose
FindFirstFileA
GetPrivateProfileStringA
GetPrivateProfileSectionA
InterlockedIncrement
InterlockedDecrement
GlobalUnlock
GlobalSize
GlobalLock
CreateDirectoryA
GetVersionExA
GetLocaleInfoA
InitializeCriticalSection
lstrcpynA
GetCurrentProcess
DeleteCriticalSection
GetTempPathA
GetSystemDefaultLangID
EnterCriticalSection
LeaveCriticalSection
TerminateThread
GetExitCodeThread
GetSystemDirectoryA
ReadFile
SetFilePointer
GetSystemTime
GetPrivateProfileIntA
lstrcpyA
LocalFree
FormatMessageA
lstrlenA
GetShortPathNameA
WinExec
lstrcatA
WritePrivateProfileStringA
GetLastError
GlobalAlloc
MoveFileA
DeleteFileA
CompareStringA
GetDiskFreeSpaceExA
LocalFileTimeToFileTime
SystemTimeToFileTime
FlushFileBuffers
SetFileTime
ExitProcess
FileTimeToSystemTime
MulDiv
CreateEventA
GlobalFree
LockResource
SizeofResource
LoadResource
FindResourceA
ResetEvent
SetEvent
GetCurrentDirectoryA
ReleaseMutex
CreateMutexA
GetWindowsDirectoryA
GetVersion
SetFileAttributesA
SetLastError
DuplicateHandle
WriteFile
LockFile
UnlockFile
SetEndOfFile
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
lstrcmpiA
SetThreadPriority
GetCurrentThreadId
SuspendThread
VirtualProtect
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FileTimeToLocalFileTime
GetFileTime
lstrcmpA
GetProfileIntA
GetCurrentThread
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
user32
IsDialogMessageA
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
GetMenuState
GetMenuCheckMarkDimensions
wvsprintfA
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
LoadStringA
LoadAcceleratorsA
TranslateAcceleratorA
SetMenu
ReuseDDElParam
UnpackDDElParam
CopyAcceleratorTableA
IsClipboardFormatAvailable
PostQuitMessage
GetNextDlgGroupItem
SetWindowContextHelpId
IsZoomed
UnionRect
CharNextA
MsgWaitForMultipleObjects
GetDialogBaseUnits
GetClassNameA
GetDCEx
LockWindowUpdate
PostThreadMessageA
SetParent
GetSystemMenu
InvertRect
DdeGetData
DdeFreeDataHandle
DdeNameService
DrawFrameControl
CallWindowProcA
ShowWindow
CreateWindowExA
DrawMenuBar
AppendMenuA
GetWindowTextA
ShowOwnedPopups
TrackPopupMenu
DestroyWindow
GetWindowPlacement
SetWindowPlacement
MoveWindow
GetMenu
RegisterWindowMessageA
wsprintfA
MessageBeep
DefWindowProcA
SetActiveWindow
RedrawWindow
ReleaseCapture
SetCapture
EmptyClipboard
SetClipboardData
GetForegroundWindow
ChangeClipboardChain
DeleteMenu
SetMenuDefaultItem
SetClipboardViewer
DdeInitializeA
DdeCreateStringHandleA
DdeConnect
DdeClientTransaction
DdeDisconnect
DdeFreeStringHandle
DdeUninitialize
GetKeyState
GetMenuItemCount
GetMenuItemID
SetScrollPos
ScrollWindowEx
GetMenuItemInfoA
SetMenuItemInfoA
FindWindowExA
SetWindowTextA
FindWindowA
BringWindowToTop
SetForegroundWindow
ExitWindowsEx
GetDesktopWindow
SetWindowLongA
GetWindowDC
RemoveMenu
GetSystemMetrics
GetAsyncKeyState
RegisterClipboardFormatA
SetFocus
PtInRect
OpenClipboard
GetClipboardData
CloseClipboard
LoadIconA
IsIconic
FrameRect
LoadImageA
GetIconInfo
CreateIconIndirect
GetDC
ReleaseDC
DrawStateA
OffsetRect
TrackPopupMenuEx
ClientToScreen
WindowFromPoint
GetActiveWindow
GetParent
GetNextDlgTabItem
GetWindowLongA
DestroyIcon
DestroyCursor
DestroyMenu
LoadMenuA
GetSubMenu
GetCursorPos
SetTimer
IsWindowVisible
InflateRect
UpdateWindow
EqualRect
InvalidateRect
GetMessagePos
IsRectEmpty
GetFocus
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
SendMessageA
IsDlgButtonChecked
SetDlgItemTextA
FillRect
DrawFocusRect
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
AdjustWindowRectEx
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
LoadCursorA
SetCursor
CopyRect
KillTimer
GetWindow
ScreenToClient
GetSysColor
DrawEdge
IsWindow
SetWindowPos
SetRectEmpty
GetClientRect
GetDlgItem
GetWindowRect
LoadBitmapA
PostMessageA
EnableWindow
GetTopWindow
WinHelpA
GetScrollRange
SetScrollRange
ModifyMenuA
GetScrollPos
GetClassInfoA
RegisterClassA
GetWindowTextLengthA
GetDlgCtrlID
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
DdePostAdvise
GetLastActivePopup
IntersectRect
EndDialog
CreateDialogIndirectParamA
MapDialogRect
IsWindowEnabled
GetMessageA
TranslateMessage
DispatchMessageA
CallNextHookEx
ValidateRect
PeekMessageA
SetWindowsHookExA
CharUpperA
OemToCharA
CharToOemA
GetCapture
SystemParametersInfoA
CopyIcon
GetSysColorBrush
SetRect
MessageBoxExA
IsChild
CreatePopupMenu
InsertMenuA
DdeGetLastError
MessageBoxA
DdeQueryStringA
GetMenuStringA
DdeCreateDataHandle
GetMessageTime
gdi32
GetTextExtentPointA
CreateDCA
CopyMetaFileA
EnumFontFamiliesExA
GetBkColor
GetTextColor
GetTextMetricsA
LPtoDP
DPtoLP
CombineRgn
SetRectRgn
GetMapMode
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateDIBPatternBrushPt
CreatePatternBrush
CreateHatchBrush
ExtCreatePen
GetWindowExtEx
GetViewportExtEx
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
ExtSelectClipRgn
SelectClipPath
GetClipRgn
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
SetArcDirection
ArcTo
GetCurrentPositionEx
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectPalette
RestoreDC
SaveDC
StartDocA
CreateFontA
GetCharWidthA
StretchDIBits
GetClipBox
GetDCOrgEx
Rectangle
PatBlt
CreatePalette
GetDeviceCaps
RealizePalette
PtInRegion
FillRgn
CreatePolygonRgn
MoveToEx
LineTo
CreateSolidBrush
CreatePen
GetPixel
SetPixel
SelectObject
SetBkColor
SetTextColor
DeleteDC
DeleteObject
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateBitmap
GetObjectA
CreateFontIndirectA
CreateRectRgn
GetTextExtentPoint32A
CreateRectRgnIndirect
GetStockObject
CreateDIBitmap
comdlg32
GetFileTitleA
GetOpenFileNameA
ChooseColorA
GetSaveFileNameA
winspool.drv
ClosePrinter
OpenPrinterA
DocumentPropertiesA
shell32
SHFileOperationA
SHGetPathFromIDListA
SHBrowseForFolderA
ExtractIconA
DragFinish
DragAcceptFiles
Shell_NotifyIconA
SHGetFileInfoA
ShellExecuteExA
SHGetSpecialFolderLocation
DragQueryFileA
ShellExecuteA
SHGetMalloc
SHGetDesktopFolder
comctl32
ImageList_Create
ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_GetIcon
ImageList_Remove
ImageList_GetImageInfo
PropertySheetA
DestroyPropertySheetPage
CreatePropertySheetPageA
ord17
ord13
ord14
ImageList_Destroy
ImageList_Duplicate
ImageList_DrawIndirect
ImageList_Write
ImageList_Read
_TrackMouseEvent
ImageList_Draw
ImageList_AddMasked
ImageList_LoadImageA
ImageList_Merge
ImageList_SetOverlayImage
oledlg
ord8
ole32
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
CoDisconnectObject
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
ReleaseStgMedium
OleGetClipboard
CLSIDFromProgID
CLSIDFromString
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
StgCreateDocfileOnILockBytes
CoCreateGuid
OleIsCurrentClipboard
CreateBindCtx
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
CoRegisterMessageFilter
CoRegisterClassObject
CoRevokeClassObject
StgOpenStorageOnILockBytes
CoCreateInstance
CoGetClassObject
OleSetClipboard
OleFlushClipboard
StringFromGUID2
CreateStreamOnHGlobal
OleRun
OleDuplicateData
olepro32
ord251
ord253
oleaut32
SysFreeString
SysStringLen
SysAllocStringLen
VariantClear
SafeArrayDestroy
SafeArrayPutElement
SafeArrayCreate
VariantInit
SysAllocString
VariantTimeToSystemTime
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayRedim
VariantCopy
SysAllocStringByteLen
VariantChangeType
SysStringByteLen
VarCyFromStr
VarBstrFromCy
VarDateFromStr
VarBstrFromDate
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SysReAllocStringLen
LoadTypeLi
wsock32
connect
gethostbyname
socket
getprotobyname
gethostname
ioctlsocket
inet_addr
WSACleanup
WSAStartup
closesocket
WSASetLastError
WSAAsyncSelect
accept
listen
getsockname
bind
setsockopt
htons
ntohl
send
recv
ntohs
WSAGetLastError
WSAAsyncGetHostByName
htonl
wininet
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetGetLastResponseInfoA
GopherFindFirstFileA
InternetFindNextFileA
FtpFindFirstFileA
HttpQueryInfoA
HttpSendRequestExA
HttpEndRequestA
HttpSendRequestA
HttpAddRequestHeadersA
InternetErrorDlg
HttpOpenRequestA
GopherOpenFileA
GopherGetAttributeA
GopherCreateLocatorA
FtpGetFileA
FtpPutFileA
FtpOpenFileA
FtpGetCurrentDirectoryA
FtpSetCurrentDirectoryA
FtpRemoveDirectoryA
FtpCreateDirectoryA
FtpRenameFileA
FtpDeleteFileA
InternetConnectA
InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetCookieA
InternetSetStatusCallback
InternetCrackUrlA
InternetGetCookieA
InternetSetOptionExA
shlwapi
SHSetValueA
PathFileExistsA
SHGetValueA
SHDeleteValueA
SHDeleteKeyA
imagehlp
ImageNtHeader
CheckSumMappedFile
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 236KB - Virtual size: 235KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 332KB - Virtual size: 352KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE