Static task
static1
Behavioral task
behavioral1
Sample
681dcc0b64c74794b890d76f340e623c_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
681dcc0b64c74794b890d76f340e623c_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
681dcc0b64c74794b890d76f340e623c_JaffaCakes118
-
Size
1.3MB
-
MD5
681dcc0b64c74794b890d76f340e623c
-
SHA1
b224ee04c95ddd833f499e085a6113aec35306bb
-
SHA256
f165117f23b9245e73a6bb9f1279aeca57a67b96a2898f3a44336cf78744e9d1
-
SHA512
a04bbdc03f0fcea23171f5b7678ddd64faf09d12a7850a40d932618cae0562c16c1412a58dbc14f5e4a0d60c0eda7fff4442e4852d690f3dd5bb112f0c462a6a
-
SSDEEP
24576:s+gUEVFRCoo6hnEKj22oR6mYYoCnQjn65yV+tQtJ+3+j0Lq/mnslu:5ntoo6hnEKj22oR6mYYoCnQjn65btQt2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 681dcc0b64c74794b890d76f340e623c_JaffaCakes118
Files
-
681dcc0b64c74794b890d76f340e623c_JaffaCakes118.exe windows:4 windows x86 arch:x86
1daaf1f45c3d179ca0825778146dc643
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
UuidCreate
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
smwdmif
GetSPDIFCAPRATE
TerminateAllInst
SetJackDevice
GetInterfaceVersion
GetIndependentHeadphone
SetIndependentHeadphone
GetRearSpeakerMute
SetRearSpeakerMute
SetIndependentFrontMic
GetIndependentFrontMic
ClearToTerminate
GetJackFunction
GetOpMode
InitInterface
GetPlatformHWInformation
GetPlatformIDString
SetSpeakerConfiguration
GetCapabilities
IsDriverLoaded
SMaxLog
SetUserState
GetJackDevice
winmm
mixerGetLineControlsW
mixerGetControlDetailsW
mixerSetControlDetails
mixerGetLineInfoW
waveInGetDevCapsW
waveInGetNumDevs
mixerGetNumDevs
mixerGetID
mixerGetDevCapsW
PlaySoundW
setupapi
SetupDiClassGuidsFromNameExW
SetupDiEnumDeviceInfo
SetupDiClassNameFromGuidExW
SetupDiGetClassDescriptionExW
SetupDiGetClassDevsExW
CM_Get_DevNode_Status
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
kernel32
WritePrivateProfileStringW
GetPrivateProfileStringW
InterlockedExchange
CompareStringA
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
GetVersion
ConvertDefaultLocale
GetCurrentThread
FindClose
FindNextFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileW
GetThreadLocale
ReadFile
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetVolumeInformationW
GetFullPathNameW
GetPrivateProfileIntW
GlobalFlags
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
GetFileAttributesW
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
RtlUnwind
HeapReAlloc
RaiseException
ExitProcess
HeapSize
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetCurrentDirectoryA
GetDriveTypeA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
GetCurrentProcessId
GetModuleHandleA
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
GetVersionExA
SetLastError
FormatMessageW
LocalFree
MulDiv
FreeLibrary
InterlockedDecrement
EnterCriticalSection
InterlockedIncrement
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
DeviceIoControl
GlobalLock
GlobalAlloc
GlobalUnlock
GlobalFree
lstrcmpiW
LoadLibraryW
CreateProcessW
GetProcAddress
GetCurrentProcess
GetWindowsDirectoryW
lstrlenA
lstrcmpW
lstrcpyW
lstrcatW
MultiByteToWideChar
GetVersionExW
GetSystemDefaultLangID
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
lstrcpynW
GetModuleHandleW
GetModuleFileNameW
lstrlenW
CreateThread
SetThreadPriority
ResumeThread
CreateEventW
WaitForMultipleObjects
GetLastError
CreateFileW
Sleep
GetLocalTime
GetDateFormatW
WideCharToMultiByte
GetTimeFormatW
SetFilePointer
WriteFile
SetEvent
CloseHandle
user32
CharUpperW
GetSysColorBrush
UnregisterClassW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
PeekMessageW
MapWindowPoints
TrackPopupMenu
GetKeyState
IsWindowVisible
UpdateWindow
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMessageW
IsIconic
GetSystemMetrics
GetMenuState
GetMenuItemID
GetMenuItemCount
GetWindowTextLengthW
GetWindow
SetWindowPlacement
GetWindowPlacement
MoveWindow
SetClassLongW
GetActiveWindow
GetWindowTextW
GetClientRect
GetMessagePos
SetCursor
LoadCursorW
PtInRect
ExitWindowsEx
DrawEdge
GetCursorPos
DeleteMenu
GetComboBoxInfo
GetClassNameW
SetWindowPos
SetFocus
SetForegroundWindow
GetParent
ReleaseDC
GetDC
BringWindowToTop
SetWindowRgn
GetSubMenu
SetMenuDefaultItem
FillRect
CopyRect
OffsetRect
RegisterWindowMessageW
FindWindowW
MessageBoxW
PostMessageW
LoadMenuIndirectW
LoadMenuW
GetFocus
InvalidateRect
ScreenToClient
ClientToScreen
SendMessageW
DrawTextW
DrawFocusRect
GetWindowRect
LoadBitmapW
IsWindow
LoadIconW
KillTimer
SetTimer
SetRect
GetWindowLongW
SetWindowLongW
EnableWindow
TranslateMessage
ValidateRect
PostQuitMessage
DestroyMenu
GetWindowThreadProcessId
EndPaint
BeginPaint
GrayStringW
DrawTextExW
TabbedTextOutW
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
IsWindowEnabled
ShowWindow
SetWindowTextW
IsDialogMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
SetWindowsHookExW
CallNextHookEx
SystemParametersInfoA
GetClassLongW
GetSysColor
UnregisterClassA
gdi32
GetCurrentObject
OffsetRgn
CombineRgn
CreateRectRgn
GetBitmapBits
GetTextExtentPoint32W
StretchDIBits
DPtoLP
SetBkColor
GetBkColor
DeleteDC
SelectObject
GetDeviceCaps
GetClipBox
SetTextColor
SaveDC
RestoreDC
CreateFontIndirectW
DeleteObject
GetPixel
StretchBlt
BitBlt
GetMapMode
CreateCompatibleDC
CreateCompatibleBitmap
SetMapMode
CreateBitmapIndirect
CreateSolidBrush
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetStockObject
SelectPalette
CreatePolygonRgn
SetStretchBltMode
SetBkMode
CreateBitmap
GetObjectW
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
advapi32
OpenSCManagerW
CloseServiceHandle
OpenServiceW
StartServiceW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegNotifyChangeKeyValue
RegOpenKeyW
RegSetValueExW
RegCreateKeyExW
RegCreateKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
shell32
Shell_NotifyIconW
shlwapi
PathFindFileNameW
PathFindExtensionW
PathIsUNCW
PathStripToRootW
ole32
CoInitialize
CoUninitialize
CoCreateInstance
PropVariantClear
oleaut32
VariantInit
VariantChangeType
VariantClear
Sections
.text Size: 304KB - Virtual size: 302KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 920KB - Virtual size: 920KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE