Static task
static1
Behavioral task
behavioral1
Sample
7870ad3d1f2e51658121743125e7851d_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
7870ad3d1f2e51658121743125e7851d_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
7870ad3d1f2e51658121743125e7851d_JaffaCakes118
-
Size
41KB
-
MD5
7870ad3d1f2e51658121743125e7851d
-
SHA1
26efcad07e9dcb0698cf89870d99f0b52b1adc90
-
SHA256
bc4f7753329e556e7092984528fd6faf85383593f0ea4b3ee52239eba0d65a5f
-
SHA512
438dfa05ec258289b63ea6bf03686eed8f30f02ceb52feace0c05f7f3badb5a73be7c6b22085e7d962ce3c289a86ea85bbd10ac3f70d24bff3bb32a297285c8c
-
SSDEEP
768:2rQX0bp037QdXqFLmW6jBUwVIRHLPg36hwtiMAOJBZiuK2OqS32u2OqSOcTq6GGq:Yp03EdXAmpUVRLo3VBAOJBZiuK2OqS3k
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7870ad3d1f2e51658121743125e7851d_JaffaCakes118
Files
-
7870ad3d1f2e51658121743125e7851d_JaffaCakes118.exe windows:5 windows x86 arch:x86
6ef0ccd0bd09cb19016c82e7ddbcf338
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
activeds
DllGetClassObject
FreeADsMem
msvcrt
wcsncmp
vswprintf
_wtol
wcstoul
wcslen
calloc
time
swprintf
_wcsnicmp
fputws
_itow
__argc
_wcsupr
__wargv
__doserrno
_except_handler3
fflush
iswspace
_onexit
fwrite
malloc
wcsrchr
abort
_wcsdup
gmtime
_endthreadex
fread
fclose
memmove
_wfullpath
mktime
floor
clearerr
wcstod
wcstol
fseek
wcsspn
_wcsrev
_snwprintf
__dllonexit
_wtoi
modf
_beginthreadex
_wsplitpath
_initterm
wcsncpy
realloc
_open_osfhandle
wcscmp
iswdigit
_ultow
_adjust_fdiv
__CxxFrameHandler
_fdopen
ftell
_expand
wcscpy
wcsftime
fgetws
localtime
_msize
_get_osfhandle
_wcslwr
_CxxThrowException
wcscspn
ceil
wcsstr
wcschr
_ltow
wcspbrk
free
_purecall
gdi32
SetBkColor
CreatePalette
GetPolyFillMode
SetBrushOrgEx
MoveToEx
ArcTo
SetRectRgn
GetPixel
GetCharWidthW
OffsetClipRgn
SetColorAdjustment
CreateDIBPatternBrushPt
Rectangle
IntersectClipRect
GetClipRgn
GetObjectType
GetStretchBltMode
SetStretchBltMode
TextOutW
CreateMetaFileW
SelectPalette
SetTextColor
GetClipBox
GetNearestColor
GetROP2
ScaleViewportExtEx
PatBlt
ExtCreatePen
GetDeviceCaps
GetPaletteEntries
GetTextColor
CloseMetaFile
GetBkColor
GetMapMode
GetViewportExtEx
PolyBezierTo
RestoreDC
UnrealizeObject
EnumFontFamiliesExW
StretchDIBits
GetWindowExtEx
AbortDoc
Escape
SetArcDirection
LineTo
SetTextCharacterExtra
GetBkMode
PolyDraw
RealizePalette
SetBkMode
SetTextAlign
OffsetWindowOrgEx
RectVisible
CreateFontIndirectW
CreateRectRgnIndirect
SelectClipPath
ScaleWindowExtEx
DPtoLP
CombineRgn
SetViewportExtEx
GetStockObject
GetTextFaceW
GetWindowOrgEx
GetTextAlign
GetTextMetricsW
BitBlt
SetTextJustification
EndDoc
CreateSolidBrush
GetTextExtentPoint32A
CreateRectRgn
SetROP2
CreateHatchBrush
EnumFontFamiliesW
DeleteDC
EndPage
PtVisible
SetAbortProc
StartPage
OffsetViewportOrgEx
CreateFontW
SetMapMode
SetViewportOrgEx
EnumMetaFile
PlayMetaFileRecord
ExtSelectClipRgn
CreatePatternBrush
ExtTextOutW
CreateBitmap
DeleteMetaFile
CreateCompatibleDC
CreateDCW
GetObjectW
PlayMetaFile
CreatePen
SelectClipRgn
SetWindowOrgEx
SaveDC
PolylineTo
SetMapperFlags
GetTextExtentPoint32W
StartDocW
CreateCompatibleBitmap
GetCurrentPositionEx
LPtoDP
CopyMetaFileW
GetViewportOrgEx
DeleteObject
SetPolyFillMode
OffsetRgn
SetWindowExtEx
SelectObject
ExcludeClipRect
cmdial32
AutoDialFunc
CmCustomHangUp
advapi32
RegCreateKeyExW
RegQueryValueW
GetFileSecurityW
RegEnumKeyW
RegSetValueExW
RegCloseKey
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyW
SetFileSecurityW
RegSetValueW
RegDeleteValueW
RegQueryValueExW
RegOpenKeyW
kernel32
LocalLock
lstrcpynA
LoadResource
SetFileTime
LockFile
GetVersionExA
GetPrivateProfileStringW
GetFileTime
LockResource
GlobalHandle
GetFileAttributesW
QueryPerformanceCounter
lstrcpyA
SetFilePointer
SizeofResource
DelayLoadFailureHook
VirtualProtect
GlobalAddAtomW
GetTickCount
FindResourceExW
CreateMutexW
MulDiv
InterlockedDecrement
MoveFileW
FileTimeToLocalFileTime
lstrcpyW
GlobalFindAtomW
SetUnhandledExceptionFilter
TlsSetValue
InterlockedCompareExchange
Sleep
CreateSemaphoreW
lstrcmpiA
SearchPathW
TlsGetValue
InterlockedIncrement
GlobalDeleteAtom
OutputDebugStringW
GetCurrentProcess
SetEndOfFile
lstrcmpW
GetFileSize
GetCurrentDirectoryW
GetDiskFreeSpaceW
FlushFileBuffers
FreeConsole
SetErrorMode
lstrcatW
VirtualQuery
LoadLibraryW
VirtualAlloc
FindClose
GetLastError
CopyFileW
GetProfileIntW
WideCharToMultiByte
GetCurrentProcessId
GlobalSize
FindNextFileW
DuplicateHandle
GlobalFree
GetVersionExW
GlobalLock
GetShortPathNameW
FreeResource
ReadFile
LeaveCriticalSection
GetSystemInfo
GetPrivateProfileIntW
GetTempFileNameW
GlobalReAlloc
GetUserDefaultLCID
GlobalGetAtomNameW
lstrcatA
lstrcmpiW
GetVersion
UnhandledExceptionFilter
UnlockFile
CloseHandle
ReleaseSemaphore
CreateFileW
DeleteCriticalSection
FreeLibrary
SetFileAttributesW
FindResourceW
LocalFileTimeToFileTime
LocalAlloc
lstrlenA
SystemTimeToFileTime
SuspendThread
GetStringTypeExW
GetTempPathW
LoadLibraryA
ReleaseMutex
LocalFree
TlsAlloc
FindFirstFileW
GetModuleHandleW
SetThreadPriority
SetLastError
LocalUnlock
CreateEventW
TerminateProcess
WritePrivateProfileStringW
LocalReAlloc
GetVolumeInformationW
GlobalUnlock
TlsFree
FormatMessageW
GlobalFlags
MultiByteToWideChar
GetSystemDirectoryA
lstrlenW
GetProcessVersion
WaitForMultipleObjects
lstrcpynW
GetFullPathNameW
ResumeThread
GetModuleHandleA
GetProcAddress
GetModuleFileNameW
GetCurrentThread
SetEvent
WriteFile
IsDBCSLeadByte
LoadLibraryExA
GetThreadLocale
DeleteFileW
InitializeCriticalSection
GetSystemTimeAsFileTime
WaitForSingleObject
GetCurrentThreadId
lstrcmpA
EnterCriticalSection
GlobalAlloc
user32
WindowFromDC
GetCursorPos
GetMessageTime
SendDlgItemMessageA
IsClipboardFormatAvailable
SetCapture
CheckDlgButton
SetWindowLongW
OffsetRect
GetSysColorBrush
SetWindowPos
GetTabbedTextExtentA
GetActiveWindow
GetMessagePos
GetAsyncKeyState
ReleaseDC
GetMenuCheckMarkDimensions
SystemParametersInfoW
LoadStringW
IsIconic
EndDialog
UnhookWindowsHookEx
LockWindowUpdate
KillTimer
AdjustWindowRectEx
DestroyIcon
BeginDeferWindowPos
SetRectEmpty
SetFocus
GrayStringW
GetDialogBaseUnits
BeginPaint
MessageBoxA
SetPropW
BringWindowToTop
IntersectRect
TabbedTextOutW
SetRect
GetCapture
IsWindowEnabled
GetMenuItemID
GetFocus
CreateMenu
SetParent
SetMenu
wvsprintfW
IsZoomed
DefFrameProcW
FrameRect
PeekMessageW
SetWindowContextHelpId
GetDlgItem
LoadIconW
LoadBitmapW
SetMenuItemBitmaps
ValidateRect
InflateRect
SetWindowPlacement
RedrawWindow
WinHelpW
EnableWindow
CopyAcceleratorTableW
RegisterClassW
RemoveMenu
DestroyMenu
SetScrollInfo
UnionRect
GetTabbedTextExtentW
MsgWaitForMultipleObjects
GetTopWindow
SystemParametersInfoA
SendDlgItemMessageW
TrackPopupMenu
SetDlgItemInt
ReleaseCapture
UnpackDDElParam
GetDlgItemInt
EnableMenuItem
GetMenuStringW
GetClassInfoW
GetDlgCtrlID
LoadMenuW
MessageBoxW
GetWindowRect
DrawFocusRect
EndDeferWindowPos
RegisterClipboardFormatW
TranslateMDISysAccel
GetWindowPlacement
PtInRect
ScrollWindowEx
GetWindowTextW
ScrollWindow
GetClientRect
GetWindowDC
DrawMenuBar
ShowWindow
InsertMenuW
GetNextDlgGroupItem
IsDlgButtonChecked
PostQuitMessage
DrawTextW
InvalidateRect
MoveWindow
GetSysColor
CountClipboardFormats
GetWindowLongW
SetActiveWindow
SetCursorPos
SetDlgItemTextW
CallWindowProcW
GetMenuItemCount
GetScrollPos
WaitMessage
wsprintfW
UnregisterClassW
ClipCursor
WindowFromPoint
ShowOwnedPopups
GetSystemMenu
DefMDIChildProcW
EnumChildWindows
GetForegroundWindow
LoadAcceleratorsW
EqualRect
PostThreadMessageW
CharNextW
SetCursor
IsDialogMessageW
IsChild
DeferWindowPos
MessageBeep
CheckRadioButton
GetSubMenu
DestroyWindow
IsWindow
EndPaint
FillRect
GetWindowTextLengthW
GetScrollInfo
CheckMenuItem
LoadCursorW
ReuseDDElParam
GetMenu
GetClassNameW
GetDlgItemTextW
GetWindowThreadProcessId
MapDialogRect
DeleteMenu
SetWindowsHookExW
CopyRect
DrawEdge
GetSystemMetrics
InvertRect
IsRectEmpty
GetDC
RemovePropW
ShowScrollBar
DefWindowProcW
SetWindowTextW
CallNextHookEx
SetScrollRange
AppendMenuW
ModifyMenuW
IsWindowVisible
SetTimer
PostMessageW
SetScrollPos
ClientToScreen
MapWindowPoints
CreateDialogIndirectParamW
TranslateAcceleratorW
DestroyCursor
GetKeyState
SetForegroundWindow
GetNextDlgTabItem
GetDesktopWindow
UpdateWindow
GetLastActivePopup
GetWindow
GetParent
DispatchMessageW
CreateWindowExW
CharUpperW
GetScrollRange
InvalidateRgn
InSendMessage
GetMenuState
TranslateMessage
GetMessageW
GetDCEx
GetPropW
ScreenToClient
RegisterWindowMessageW
SendMessageW
FindWindowW
ole32
IsAccelerator
StgCreateDocfileOnILockBytes
OleRun
ReleaseStgMedium
WriteFmtUserTypeStg
CoLockObjectExternal
CoGetClassObject
OleInitialize
CoTaskMemAlloc
OleLoad
CreateGenericComposite
CoRegisterMessageFilter
GetRunningObjectTable
OleQueryLinkFromData
CLSIDFromString
CreateFileMoniker
OleRegEnumVerbs
OleRegGetMiscStatus
RevokeDragDrop
OleCreateLinkToFile
OleSave
StringFromGUID2
CoInitialize
CoUninitialize
OleFlushClipboard
CoCreateInstance
OleIsRunning
StgOpenStorageOnILockBytes
CreateDataCache
OleQueryCreateFromData
OleCreateStaticFromData
WriteClassStm
OleGetClipboard
ReadClassStm
OleSetMenuDescriptor
OleSetClipboard
CreateILockBytesOnHGlobal
OleLoadFromStream
OleTranslateAccelerator
DoDragDrop
CreateStreamOnHGlobal
CreateBindCtx
CreateDataAdviseHolder
SetConvertStg
OleUninitialize
OleCreateMenuDescriptor
ReadClassStg
GetClassFile
StgIsStorageFile
CreateItemMoniker
OleCreateFromData
GetHGlobalFromILockBytes
OleRegGetUserType
CoGetMalloc
CoDisconnectObject
OleSetContainedObject
CoTaskMemFree
WriteClassStg
OleDuplicateData
OleDestroyMenuDescriptor
OleCreateFromFile
RegisterDragDrop
CoRevokeClassObject
CoTreatAsClass
OleSaveToStream
CreateOleAdviseHolder
OleIsCurrentClipboard
StgOpenStorage
StgCreateDocfile
OleLockRunning
OleGetIconOfClass
OleCreate
OleCreateLinkFromData
CLSIDFromProgID
StringFromCLSID
ReadFmtUserTypeStg
CoRegisterClassObject
CoFreeUnusedLibraries
wininet
InternetSetOptionExW
InternetFindNextFileW
FtpDeleteFileW
InternetSetStatusCallbackW
HttpAddRequestHeadersW
FtpGetFileW
InternetQueryDataAvailable
InternetCrackUrlW
InternetConnectW
GopherOpenFileW
InternetSetFilePointer
InternetGetLastResponseInfoW
FtpOpenFileW
GopherCreateLocatorW
GopherGetAttributeW
FtpPutFileW
InternetQueryOptionW
InternetOpenW
HttpOpenRequestW
InternetOpenUrlW
FtpRemoveDirectoryW
FtpRenameFileW
InternetReadFile
HttpQueryInfoW
InternetCloseHandle
FtpFindFirstFileW
GopherFindFirstFileW
FtpSetCurrentDirectoryW
InternetWriteFile
InternetGetCookieW
FtpGetCurrentDirectoryW
FtpCreateDirectoryW
InternetCanonicalizeUrlW
InternetSetCookieW
HttpSendRequestW
HttpEndRequestW
HttpSendRequestExW
InternetErrorDlg
Sections
.text Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ