Static task
static1
Behavioral task
behavioral1
Sample
778e5b7eb5a980ba0276b4dc35087ec7_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
778e5b7eb5a980ba0276b4dc35087ec7_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
778e5b7eb5a980ba0276b4dc35087ec7_JaffaCakes118
-
Size
576KB
-
MD5
778e5b7eb5a980ba0276b4dc35087ec7
-
SHA1
b6ee7f00b8a83cd959e80163174a7ef30b2daee8
-
SHA256
21afa93ddaec2b5afcfe0ee8d0c9e8ceb98e9e62fe332f5672d74cdbeb9e175a
-
SHA512
8a0945dc912cb0c8968cdd3bc776a71a1017396efe90144541a9b0c712c1fc35951a0b23d93ab459825fd42e7c774195306ce91bd52d409215f4f9f0022ed81e
-
SSDEEP
6144:T83stNQoYNiy/8DaSg78OYzL5o+8KTkIk0S+X13nx0PKmzwijmjUmynaUypKmVHr:T83snIblSgIkMpxSkIMQaDVNLZLZL+U
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 778e5b7eb5a980ba0276b4dc35087ec7_JaffaCakes118
Files
-
778e5b7eb5a980ba0276b4dc35087ec7_JaffaCakes118.exe windows:4 windows x86 arch:x86
b427e7891b84c0934300123f6010b8af
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
psapi
GetModuleBaseNameA
EnumProcesses
EnumProcessModules
winmm
PlaySoundA
timeGetTime
kernel32
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
GlobalFlags
WritePrivateProfileStringA
GetCPInfo
GetOEMCP
SetErrorMode
HeapReAlloc
VirtualAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetStartupInfoA
RtlUnwind
RaiseException
ExitProcess
HeapSize
TlsSetValue
HeapDestroy
HeapCreate
VirtualFree
GetStdHandle
GetACP
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetFileTime
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetThreadLocale
GlobalFindAtomA
lstrcmpW
GetModuleFileNameW
GlobalGetAtomNameA
GlobalAddAtomA
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
FreeResource
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
SetLastError
GetVersionExA
GetCommandLineA
FreeLibrary
LoadLibraryA
DeleteFileA
GetCurrentDirectoryA
GetTickCount
TerminateProcess
GetCurrentProcessId
OpenProcess
GetModuleFileNameA
InterlockedDecrement
FormatMessageA
CloseHandle
WriteFile
LocalFree
GetFileSize
ReadFile
CreateFileA
FindResourceA
LoadResource
LockResource
SizeofResource
HeapAlloc
GetProcessHeap
HeapFree
GetDriveTypeA
GetVolumeInformationA
GetModuleHandleA
GetProcAddress
InterlockedExchange
MultiByteToWideChar
GetLastError
lstrlenA
CompareStringW
WideCharToMultiByte
GetVersion
CompareStringA
Sleep
user32
GetSysColorBrush
PostThreadMessageA
UnregisterClassA
SendDlgItemMessageA
GetClassLongA
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
DeferWindowPos
SetWindowPlacement
DefWindowProcA
GetWindowPlacement
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
ValidateRect
UnpackDDElParam
ReuseDDElParam
DestroyMenu
WinHelpA
SetWindowPos
SetFocus
EqualRect
GetKeyState
GetDlgCtrlID
GetMenu
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
GetClassInfoA
IntersectRect
OffsetRect
SetRectEmpty
CopyRect
BringWindowToTop
GetMenuItemInfoA
GetWindow
ShowWindow
TranslateAcceleratorA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
CheckMenuItem
PostQuitMessage
RegisterClipboardFormatA
ShowOwnedPopups
GetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
GetMenuState
GetMenuItemCount
SetParent
FindWindowA
GetCursorPos
CharUpperA
SetCursor
SetWindowLongA
TrackPopupMenu
RegisterWindowMessageA
EnableMenuItem
DrawAnimatedRects
IsWindow
LoadMenuA
PostMessageA
SetForegroundWindow
SetMenuDefaultItem
GetClassNameA
GetSubMenu
GetMenuItemID
SetActiveWindow
EnumChildWindows
SystemParametersInfoA
LoadImageA
SetWindowsHookExA
UpdateWindow
InflateRect
MoveWindow
SetWindowTextA
IsDialogMessageA
IsWindowVisible
UnhookWindowsHookEx
SetMenu
GetCapture
ReleaseCapture
GetWindowRect
CallWindowProcA
LoadCursorA
SendMessageA
GetDlgItem
ClientToScreen
InvalidateRect
GetParent
RemovePropA
GetWindowLongA
PtInRect
SetPropA
GetPropA
MessageBoxA
GetSystemMetrics
LoadIconA
SetClassLongA
EnableWindow
GetClientRect
DrawIcon
IsIconic
GetDesktopWindow
GetWindowRgn
SetWindowRgn
GetDC
KillTimer
SetTimer
RedrawWindow
SendMessageCallbackA
PeekMessageA
gdi32
DeleteDC
CreateBitmap
GetStockObject
CreateSolidBrush
CreateCompatibleBitmap
GetPixel
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
FillRgn
PtInRegion
CreatePatternBrush
DeleteObject
GetObjectA
SetTextColor
CreateFontIndirectA
GetClipBox
SetMapMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateCompatibleDC
CreatePen
BitBlt
GetDeviceCaps
Rectangle
GetTextExtentPoint32A
SelectObject
CreateRoundRectRgn
PtVisible
msimg32
TransparentBlt
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegEnumValueA
RegFlushKey
RegSetValueExA
RegDeleteValueA
RegCreateKeyA
RegQueryValueExA
RegCloseKey
shell32
Shell_NotifyIconA
SHAppBarMessage
DragFinish
DragQueryFileA
ShellExecuteA
comctl32
_TrackMouseEvent
shlwapi
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA
oledlg
ord8
ole32
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
oleaut32
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantInit
VariantClear
VariantChangeType
Sections
.text Size: 336KB - Virtual size: 335KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ