Static task
static1
Behavioral task
behavioral1
Sample
665052e57cbcd3721abcd4e364d6438c_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
665052e57cbcd3721abcd4e364d6438c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
665052e57cbcd3721abcd4e364d6438c_JaffaCakes118
-
Size
306KB
-
MD5
665052e57cbcd3721abcd4e364d6438c
-
SHA1
74dae541806a58b7aed7676b81c19f2463377e44
-
SHA256
8471e077f96e36971f144d58a37efdbb37f6907b3d0264c552c35c8d896fbbb2
-
SHA512
d6f2f5193ade628eebac2991da0422bc713a048631b67a03e0edeeb30a10f8c0f04cf9346190f514a2b9277400b80a6b5cbe717ec4cfd15f93a0a22a055cada8
-
SSDEEP
6144:kFK/T+tXE6HtZjT2GosZi4S+wW2SMTlyZmQ:kFacECt1THos84h2S2ym
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 665052e57cbcd3721abcd4e364d6438c_JaffaCakes118
Files
-
665052e57cbcd3721abcd4e364d6438c_JaffaCakes118.exe windows:4 windows x86 arch:x86
4b80cb278fc147869a66d02377c89be4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlDetermineDosPathNameType_U
wcsncmp
NtQueryDirectoryObject
wcsstr
NtQueryObject
NtOpenDirectoryObject
_ftol
wcscpy
_alloca_probe
wcscmp
NtQueryInformationProcess
memmove
wcslen
sprintf
_wcsnicmp
wcsncpy
NtDuplicateObject
NtQuerySystemInformation
swprintf
RtlUnwind
NtQueryVirtualMemory
NtReadVirtualMemory
RtlNtStatusToDosError
NtOpenFile
_snwprintf
_wcsicmp
NtOpenSymbolicLinkObject
NtQuerySymbolicLinkObject
NtClose
NtOpenSection
RtlInitUnicodeString
NtCreateFile
ws2_32
gethostname
htonl
getservbyport
WSAStartup
gethostbyaddr
htons
kernel32
GetProcessVersion
TlsGetValue
SetFilePointer
FlushFileBuffers
SetErrorMode
GetStartupInfoW
ExitProcess
RaiseException
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
LocalReAlloc
lstrlenW
TlsSetValue
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetStdHandle
GetACP
GetOEMCP
GlobalAddAtomA
GetProfileStringA
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
SizeofResource
GlobalFlags
lstrcmpiW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetModuleFileNameW
lstrcmpW
GlobalAlloc
lstrcmpA
lstrcmpiA
InterlockedDecrement
InterlockedIncrement
MulDiv
GetModuleHandleA
LoadLibraryA
MultiByteToWideChar
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetModuleHandleW
GlobalLock
GlobalUnlock
GlobalFree
WriteFile
CreateFileW
GetCurrentThread
lstrcpynW
lstrcatW
WinExec
lstrcpyW
CreateThread
FindResourceA
LocalFree
LocalAlloc
LoadLibraryExW
FormatMessageW
WideCharToMultiByte
FreeLibrary
FindResourceW
LoadResource
LockResource
GetCPInfo
lstrlenA
GetVersion
GetVersionExW
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
DeviceIoControl
GetProcessHeap
OpenProcess
HeapFree
CloseHandle
CreateEventW
GetTickCount
MapViewOfFile
UnmapViewOfFile
SetLastError
GetCurrentProcessId
LoadLibraryW
GetProcAddress
GetLastError
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
GetCommandLineW
user32
CallWindowProcW
GetPropW
UnhookWindowsHookEx
SetPropW
CallNextHookEx
SetWindowsHookExW
CreateWindowExW
GetKeyState
GetDlgCtrlID
GetWindowTextW
GetWindowTextLengthW
GetMenu
RegisterClassW
wsprintfW
WinHelpW
IsChild
GetMessageTime
RemovePropW
IsWindowVisible
DeferWindowPos
AdjustWindowRectEx
DispatchMessageW
PeekMessageW
MapWindowPoints
SendDlgItemMessageA
SendDlgItemMessageW
LoadIconW
EnableMenuItem
GetTopWindow
SetMenuItemBitmaps
IsDialogMessageW
SetWindowTextW
MoveWindow
ShowWindow
GetWindowDC
BeginPaint
EndPaint
PostQuitMessage
GetCursorPos
ValidateRect
TranslateMessage
GetMessageW
SetRectEmpty
GetClassNameW
GetDesktopWindow
GetDCEx
LockWindowUpdate
SetParent
GetMenuCheckMarkDimensions
GetLastActivePopup
GetMessagePos
GetWindow
SetWindowPos
RegisterWindowMessageW
IntersectRect
GetWindowPlacement
GetNextDlgTabItem
EndDialog
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetCapture
PtInRect
ReleaseCapture
ScreenToClient
PostMessageW
SetCapture
GetClassInfoW
DefWindowProcW
GetDlgItem
SetWindowLongW
GetFocus
IsWindowEnabled
IsWindow
SetFocus
UnionRect
EqualRect
MessageBoxW
LoadStringW
GetIconInfo
DrawStateW
GetParent
GetClientRect
FrameRect
InflateRect
OffsetRect
TrackPopupMenuEx
ClientToScreen
WindowFromPoint
GetActiveWindow
InvalidateRect
SetCursor
GetWindowLongW
DestroyCursor
DestroyMenu
GrayStringW
GetSubMenu
DrawTextW
TabbedTextOutW
LoadBitmapW
GetSysColorBrush
CreateMenu
CreatePopupMenu
GetMenuItemID
GetMenuItemCount
AppendMenuW
GetSystemMetrics
GetDC
ReleaseDC
DrawIconEx
DestroyIcon
CopyRect
FillRect
DrawEdge
SystemParametersInfoW
SetRect
GetMenuItemInfoW
GetSysColor
MessageBeep
CheckMenuRadioItem
SetTimer
GetWindowRect
IsIconic
IsZoomed
CheckMenuItem
KillTimer
SetMenu
LoadImageW
EnableWindow
GetForegroundWindow
SetForegroundWindow
LoadCursorW
SendMessageW
DrawFocusRect
ModifyMenuW
GetMenuState
UpdateWindow
GetWindowTextLengthA
HideCaret
UnregisterClassW
CallWindowProcA
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
DrawTextA
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
GetPropA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
gdi32
GetTextExtentPointA
CreateSolidBrush
GetObjectW
GetDeviceCaps
GetBkMode
CreateCompatibleDC
BitBlt
GetTextExtentPoint32W
Ellipse
DeleteDC
DeleteObject
SelectObject
CreateDIBSection
PatBlt
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
CreatePen
GetStockObject
SetTextColor
SetBkColor
CreateBitmap
CreateRectRgnIndirect
GetClipBox
SaveDC
RestoreDC
SetBkMode
CreateCompatibleBitmap
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
ExtTextOutA
CreateDIBitmap
CreateRectRgn
CreatePatternBrush
SetRectRgn
CombineRgn
StretchDIBits
GetCharWidthW
CreateFontW
GetTextMetricsW
CreateFontIndirectW
comdlg32
GetOpenFileNameW
GetSaveFileNameW
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
advapi32
RegQueryValueW
RegOpenKeyExW
RegCloseKey
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
shell32
ShellExecuteW
ShellExecuteExW
comctl32
ImageList_Draw
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_AddMasked
_TrackMouseEvent
ImageList_Destroy
ImageList_Create
ord17
ImageList_LoadImageW
Sections
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 187KB - Virtual size: 204KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ