Static task
static1
Behavioral task
behavioral1
Sample
6f4363c2c4d5b3713ae5343391d01193_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6f4363c2c4d5b3713ae5343391d01193_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
6f4363c2c4d5b3713ae5343391d01193_JaffaCakes118
-
Size
332KB
-
MD5
6f4363c2c4d5b3713ae5343391d01193
-
SHA1
501197d8f33e3cbf2a661b2566770c7f0df53f29
-
SHA256
a7793201d232fd3bcd16f5a264c5ac094a240fcfb3e82d85214ab838775dffe6
-
SHA512
b2f02d9f8d673596aa7275c8a5bc15210ce8c20b16cda699014ee05ed7530eea832f3a95f7bb62d7a9d9f034d99621a868eb9f55afb786abbaf83e41bae813bf
-
SSDEEP
6144:t758mREAPqh5R2jPEQ/kSfBhRczTn+ZDspxa1lMmp/o1vYfjtxPM4U8K9Mlax/0Z:t7nRVPqhWPEZSfjKpx6hp/o1AfA4EMMa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6f4363c2c4d5b3713ae5343391d01193_JaffaCakes118
Files
-
6f4363c2c4d5b3713ae5343391d01193_JaffaCakes118.exe windows:5 windows x86 arch:x86
b5782d7c51408c78d911bf43f00c0495
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindClose
GlobalFlags
ReleaseSemaphore
GetSystemWow64DirectoryW
SetProcessWorkingSetSize
FindAtomW
GetFileAttributesA
MultiByteToWideChar
lstrcmpiW
SetEnvironmentVariableW
GetThreadPriority
GetLocaleInfoW
GetCurrentDirectoryW
InterlockedDecrement
ResetEvent
DisableThreadLibraryCalls
ExpandEnvironmentStringsW
GetLogicalDriveStringsW
Sleep
GetFileSizeEx
LoadLibraryExW
OpenProcess
Process32FirstW
GlobalLock
GetModuleHandleW
CloseHandle
LockResource
MoveFileExW
ExpandEnvironmentStringsA
LeaveCriticalSection
TlsFree
InterlockedExchange
GetCurrentProcess
QueryPerformanceFrequency
DeleteCriticalSection
CreateDirectoryW
IsDBCSLeadByte
FormatMessageW
TryEnterCriticalSection
TerminateThread
TerminateProcess
LoadLibraryA
GetDateFormatW
ReplaceFileW
CreateActCtxW
UnmapViewOfFile
GetSystemDefaultUILanguage
HeapAlloc
GetVersionExA
GetTickCount
GetCurrentProcessId
UnlockFileEx
HeapFree
GetPrivateProfileSectionNamesW
lstrcmpW
GetFileSize
GlobalDeleteAtom
GetWindowsDirectoryW
SystemTimeToFileTime
CreateProcessW
CreateTimerQueueTimer
InterlockedIncrement
GetAtomNameW
FlushInstructionCache
lstrlenW
QueryDosDeviceW
GetPrivateProfileSectionW
CreateFileA
InterlockedCompareExchange
GlobalFree
GetModuleFileNameA
EnterCriticalSection
ReadFile
FileTimeToSystemTime
MulDiv
GetTempPathW
VirtualAlloc
GetSystemTime
SetLastError
SearchPathW
CreateEventW
LocalAlloc
UnhandledExceptionFilter
WritePrivateProfileStringW
HeapDestroy
GetModuleFileNameW
SetFilePointerEx
VirtualQuery
QueueUserWorkItem
GetShortPathNameW
GetPrivateProfileStringA
EnumUILanguagesW
CreateSemaphoreW
ResumeThread
GetVersionExW
GetTimeFormatW
SetThreadPriority
OpenMutexA
GetThreadContext
GetCurrentThread
ActivateActCtx
InitializeCriticalSectionAndSpinCount
WriteFile
DeactivateActCtx
SuspendThread
SetProcessShutdownParameters
CreateThread
OpenMutexW
LockFileEx
GetTempFileNameW
LCMapStringW
ReleaseActCtx
GetExitCodeThread
FileTimeToLocalFileTime
RemoveDirectoryW
GetSystemDirectoryA
GetModuleHandleExW
SetFileAttributesW
DeleteFileW
GetFullPathNameW
GetCurrentThreadId
SizeofResource
FindFirstFileW
SetUnhandledExceptionFilter
GetLongPathNameW
GetEnvironmentVariableW
RaiseException
SetCurrentDirectoryA
WideCharToMultiByte
GetLastError
GlobalUnlock
CompareStringA
GetSystemDefaultLCID
CompareStringW
SetEndOfFile
SetEvent
SetThreadContext
QueryPerformanceCounter
CreateFileMappingW
ReleaseMutex
GetProcAddress
CreateToolhelp32Snapshot
LoadLibraryW
CreateEventA
lstrcmpiA
GetFileAttributesW
GetLocalTime
GetFileInformationByHandle
MoveFileW
FreeLibrary
AddAtomW
WaitForSingleObjectEx
GetSystemDirectoryW
GetFileAttributesExW
GetProcessHeap
DeleteTimerQueueTimer
TlsSetValue
GetNumberFormatW
Process32NextW
LocalReAlloc
VirtualProtect
CompareFileTime
GlobalAlloc
GlobalReAlloc
lstrlenA
GetUserDefaultUILanguage
IsWow64Process
GetCPInfo
DebugBreak
ExitProcess
HeapReAlloc
OutputDebugStringA
GetACP
HeapCreate
TlsGetValue
SetCurrentDirectoryW
SetFilePointer
GlobalAddAtomW
LocalFree
CreateDirectoryA
WaitForMultipleObjects
FindNextFileW
CreateMutexA
GetSystemInfo
InitializeCriticalSection
GetModuleHandleA
LocalSize
GlobalAddAtomA
GetUserDefaultLCID
VirtualFree
DeleteAtom
SetErrorMode
CreateFileW
lstrcmpA
FreeLibraryAndExitThread
GetThreadLocale
DuplicateHandle
WritePrivateProfileSectionW
WaitForSingleObject
GetPrivateProfileStringW
GetVersion
GetModuleHandleExA
CreateFileMappingA
FindResourceW
TlsAlloc
GetSystemTimeAsFileTime
SetThreadExecutionState
FindResourceExW
OpenEventW
LocalFileTimeToFileTime
CreateMutexW
SetFileTime
CopyFileW
GlobalSize
LoadResource
MapViewOfFile
uxtheme
GetThemeMetric
DrawThemeParentBackground
GetThemeColor
GetThemeMargins
GetThemePartSize
GetThemeFont
IsAppThemed
GetThemeAppProperties
IsThemeActive
OpenThemeData
GetThemeBackgroundExtent
SetWindowTheme
DrawThemeBackground
CloseThemeData
GetThemeBackgroundContentRect
advapi32
GetTraceEnableLevel
UnregisterTraceGuids
RegOpenKeyW
RegCreateKeyA
GetTraceEnableFlags
RegDeleteKeyA
RegDeleteValueW
RegEnumValueW
GetTraceLoggerHandle
CryptDestroyHash
RegEnumKeyW
CreateProcessAsUserW
RegCreateKeyExW
RegQueryValueExA
OpenProcessToken
CryptCreateHash
RegSetValueExW
RegOpenCurrentUser
DuplicateTokenEx
IsTextUnicode
RegCloseKey
RegOpenKeyExA
RegQueryInfoKeyW
GetTokenInformation
TraceMessage
RegQueryValueW
GetUserNameW
CryptAcquireContextW
CryptGetHashParam
RegSetValueExA
OpenThreadToken
ConvertSidToStringSidW
TraceEvent
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetLengthSid
RegQueryValueExW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueA
SetTokenInformation
RegDeleteKeyW
CryptReleaseContext
RegCreateKeyExA
SetThreadToken
RegEnumValueA
CryptHashData
ImpersonateSelf
RegisterTraceGuidsW
ConvertStringSidToSidW
gdi32
CreateDCW
SetStretchBltMode
IntersectClipRect
EqualRgn
ExtTextOutW
CreatePolygonRgn
DeleteEnhMetaFile
MoveToEx
CreateDIBSection
CreateEnhMetaFileA
GetTextMetricsW
GetSystemPaletteEntries
GetDIBits
GetTextExtentPoint32A
CreateCompatibleBitmap
GetDeviceCaps
GetTextAlign
GetObjectW
CreateFontIndirectW
GetTextCharset
SelectObject
TextOutW
GetDCOrgEx
SetViewportExtEx
GetObjectA
GetBrushOrgEx
GetPixel
CreateFontW
GetGlyphIndicesW
SetTextAlign
CreateHalftonePalette
GetClipBox
BitBlt
Rectangle
GetBkMode
CreateMetaFileW
LPtoDP
CreateSolidBrush
GetLayout
GetStockObject
RealizePalette
CreateDCA
SetViewportOrgEx
CreateFontIndirectA
CreateRectRgn
PatBlt
CombineRgn
SetLayout
PlayEnhMetaFile
GetTextExtentExPointI
CreatePatternBrush
SetTextColor
GetRegionData
CreateCompatibleDC
LineTo
GetTextExtentPoint32W
SetWindowOrgEx
CreateBitmap
ExtCreateRegion
RestoreDC
OffsetRgn
SetDCPenColor
CreatePen
CreateRectRgnIndirect
GetTextExtentPointW
GetTextColor
StretchDIBits
TextOutA
CloseEnhMetaFile
SetWindowExtEx
DeleteObject
SelectPalette
OffsetWindowOrgEx
GetPaletteEntries
SetPaletteEntries
SetMapMode
StretchBlt
SaveDC
CloseMetaFile
DeleteDC
CreatePalette
GetRgnBox
SetBrushOrgEx
SetRectRgn
SetBkColor
RectVisible
CreateDIBPatternBrushPt
GetBkColor
SetBkMode
user32
GetTopWindow
GetLastActivePopup
DdeCreateDataHandle
DefWindowProcA
IsWindowVisible
MapVirtualKeyW
SendMessageA
InflateRect
SetMenu
CallWindowProcW
OffsetRect
UpdateLayeredWindow
EmptyClipboard
LoadCursorA
DdeFreeDataHandle
TranslateMessage
CheckRadioButton
DdeDisconnect
GetWindowLongA
ScreenToClient
GetWindowInfo
LoadBitmapW
GetPropW
SetWindowLongA
GetDlgItem
GetWindowLongW
EndDialog
CreateDialogParamW
SystemParametersInfoW
PeekMessageA
GetClipboardData
WindowFromPoint
ChangeClipboardChain
DrawEdge
GetMenuItemInfoW
GetWindowPlacement
GetWindow
GetClipboardFormatNameW
MonitorFromPoint
GetScrollInfo
SendMessageTimeoutA
ShowWindow
GetLastInputInfo
IntersectRect
DestroyWindow
BeginPaint
CharUpperW
BeginDeferWindowPos
MessageBeep
SetCapture
SetRect
GetClassInfoW
SystemParametersInfoA
MonitorFromWindow
WinHelpW
GetMessagePos
SetWindowsHookExW
DdeClientTransaction
CreateWindowExW
GetPropA
EnumDisplaySettingsW
IsRectEmpty
MsgWaitForMultipleObjectsEx
PostMessageA
DestroyIcon
MessageBoxIndirectW
EnumDesktopWindows
DrawFocusRect
DdeGetData
LoadMenuW
GetForegroundWindow
EnumChildWindows
GetCursorPos
UnionRect
CopyIcon
CreateIconIndirect
AllowSetForegroundWindow
ClientToScreen
GetCursor
MessageBoxExW
SetWindowPlacement
MessageBoxIndirectA
CheckMenuItem
CharPrevW
GetMenuItemCount
RegisterClassExW
SetActiveWindow
SetFocus
InvalidateRect
UnregisterClassW
ShowScrollBar
SendMessageW
SetCursorPos
SendNotifyMessageW
AppendMenuW
DdeInitializeW
IsWindow
CharLowerBuffW
ReleaseCapture
GetMenuDefaultItem
GetMenuState
SetParent
SetForegroundWindow
GetIconInfo
InsertMenuItemW
GetAsyncKeyState
CopyRect
FillRect
LockSetForegroundWindow
CreateMenu
GetMessageTime
ChildWindowFromPoint
GetDesktopWindow
CharNextA
GetDialogBaseUnits
GetKeyNameTextW
MapWindowPoints
EnableMenuItem
DdeQueryStringW
SetTimer
EndDeferWindowPos
DeferWindowPos
InsertMenuW
SetPropW
RegisterWindowMessageW
CheckDlgButton
DestroyAcceleratorTable
GetMessageW
DialogBoxIndirectParamW
EnumThreadWindows
GetWindowRgnBox
GetClientRect
MapDialogRect
PostMessageW
AdjustWindowRectEx
IsCharAlphaNumericW
OpenClipboard
GetDoubleClickTime
GetMenuStringW
GetDlgCtrlID
GetProcessWindowStation
GetWindowThreadProcessId
SetWindowPos
GetMonitorInfoW
LoadStringW
CallNextHookEx
IsDialogMessageW
GetDC
WaitForInputIdle
IsWindowEnabled
PeekMessageW
SetPropA
EnumWindows
GetAncestor
TrackPopupMenuEx
DdeConnect
IsMenu
DeleteMenu
SetWindowTextW
KillTimer
SetScrollPos
MoveWindow
AdjustWindowRect
GetSysColor
LoadCursorW
GetKeyState
DrawTextExW
CharNextW
DestroyMenu
GetWindowDC
GetFocus
RemoveMenu
SetMenuItemInfoW
IsChild
LoadAcceleratorsW
SetDlgItemTextW
DrawFrameControl
AttachThreadInput
VkKeyScanExW
IsIconic
UpdateWindow
MessageBoxExA
UnhookWindowsHookEx
SetMenuItemBitmaps
IsWindowUnicode
SetWindowLongW
FindWindowW
FindWindowExW
MsgWaitForMultipleObjects
GetSysColorBrush
SetClipboardData
SetScrollInfo
DialogBoxParamA
RegisterClassW
IsHungAppWindow
DrawIconEx
ShowCaret
TrackMouseEvent
GetSystemMenu
DdeUninitialize
GetSystemMetrics
MonitorFromRect
GetWindowRect
CharPrevA
GetClassWord
GetNextDlgTabItem
DefWindowProcW
SetMenuDefaultItem
CallMsgFilterW
GetDlgItemTextW
RedrawWindow
GetWindowTextW
AnimateWindow
CloseClipboard
PtInRect
DispatchMessageA
RemovePropA
MessageBoxW
FindWindowA
SetRectEmpty
PostThreadMessageA
SendMessageTimeoutW
GetSubMenu
PostThreadMessageW
GetMenuItemInfoA
SendDlgItemMessageW
SetDlgItemInt
DialogBoxParamW
DispatchMessageW
DdeCreateStringHandleW
CreatePopupMenu
GetComboBoxInfo
SetWindowRgn
GetClassLongW
RegisterClipboardFormatW
TrackPopupMenu
RegisterWindowMessageA
GetParent
GetKeyboardLayout
NotifyWinEvent
SetClipboardViewer
EqualRect
LoadStringA
LoadIconW
GetMenuItemID
DialogBoxIndirectParamA
PostQuitMessage
DdeFreeStringHandle
GetClassInfoExW
GetCapture
CopyImage
ReleaseDC
RegisterClipboardFormatA
GetWindowTextLengthW
CharLowerW
GetClassNameW
ShowOwnedPopups
CheckMenuRadioItem
DdeNameService
DrawTextW
WaitMessage
LoadImageW
GetMessageA
wsprintfW
IsDlgButtonChecked
RemovePropW
GetShellWindow
HideCaret
SetCursor
EnableWindow
GetActiveWindow
TranslateAcceleratorW
EndPaint
EndMenu
shell32
SHAppBarMessage
SHGetInstanceExplorer
SHGetPathFromIDListA
SHGetPathFromIDListW
SHBindToParent
ExtractIconW
DragQueryFileW
SHBrowseForFolderW
SHPathPrepareForWriteW
ShellExecuteExW
SHGetDesktopFolder
SHFileOperationW
SHGetSpecialFolderLocation
SHGetSpecialFolderPathW
SHSetLocalizedName
ExtractAssociatedIconExW
Shell_NotifyIconA
SHChangeNotify
SHGetFolderPathW
SHGetFolderLocation
SHGetFolderPathAndSubDirW
Shell_NotifyIconW
SHGetFileInfoW
ShellExecuteA
ShellExecuteW
SHCreateShellItem
ShellAboutW
SHGetDataFromIDListW
ExtractIconExW
ntdll
NtAllocateVirtualMemory
RtlUshortByteSwap
LdrGetDllHandle
psapi
GetProcessImageFileNameW
Sections
.text Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE