Static task
static1
Behavioral task
behavioral1
Sample
a0043d73d0028375e873347503444ff8_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a0043d73d0028375e873347503444ff8_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a0043d73d0028375e873347503444ff8_JaffaCakes118
-
Size
1.7MB
-
MD5
a0043d73d0028375e873347503444ff8
-
SHA1
81bf879af02a60d1208562c696af9f4c15cb343d
-
SHA256
35fc4ba413435f94e04c7acf5ad27a1373e3001f55c58900b9979b962a469591
-
SHA512
9713d1db0b1b878ebf2a0ea248ffbbf3ed3930a7b1940beac9dd43d4351b98b990b70b69b5ab2a8e410ecfc815c24a0e8be271380e74e40689e4fd3e2f7984e1
-
SSDEEP
24576:tKVlVHKKBPZYZqljiap0hAXivt5PFjCLW:GlRuIRehFztjcW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a0043d73d0028375e873347503444ff8_JaffaCakes118
Files
-
a0043d73d0028375e873347503444ff8_JaffaCakes118.exe windows:4 windows x86 arch:x86
8c5d6f9ebd473a3c17e5e5218781a7df
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
skinh
SkinH_SetAero
SkinH_AttachRes
kernel32
GetCurrentThread
CreateThread
ResumeThread
SetEvent
WaitForSingleObject
TerminateThread
CloseHandle
CreateEventA
GetWindowsDirectoryA
WinExec
RtlUnwind
RaiseException
GetStartupInfoA
HeapAlloc
HeapFree
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetACP
TerminateProcess
ExitThread
HeapReAlloc
HeapSize
SetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
HeapDestroy
HeapCreate
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
VirtualFree
VirtualAlloc
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
ReadFile
GetFileSize
DeleteFileA
CreateFileA
CopyFileA
GetModuleFileNameA
GetTickCount
GlobalUnlock
GlobalLock
GlobalAlloc
GetFileAttributesA
GetDiskFreeSpaceExA
GetVolumeInformationA
lstrlenA
GetLogicalDriveStringsA
LocalFree
LocalAlloc
lstrcpynA
FindClose
FindNextFileA
FindFirstFileA
WriteFile
SetFilePointer
RemoveDirectoryA
MoveFileA
GetLastError
CreateDirectoryA
lstrcpyA
GetProcAddress
LoadLibraryA
GetCurrentProcess
SetUnhandledExceptionFilter
LockResource
SizeofResource
LoadResource
FindResourceA
GetTempPathA
GetSystemDirectoryA
lstrcmpA
FreeLibrary
MultiByteToWideChar
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
InitializeCriticalSection
LeaveCriticalSection
PostQueuedCompletionStatus
EnterCriticalSection
GetSystemInfo
CreateIoCompletionPort
GetQueuedCompletionStatus
InterlockedDecrement
InterlockedIncrement
InterlockedExchange
CancelIo
DeleteCriticalSection
ExitProcess
CreateProcessA
GetCommandLineA
lstrcatA
GlobalFree
GlobalSize
GetModuleHandleA
LocalSize
GetVersionExA
GetVersion
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
GetCurrentThreadId
WideCharToMultiByte
FormatMessageA
SetLastError
MulDiv
DuplicateHandle
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFullPathNameA
GetStringTypeExA
GetThreadLocale
GetShortPathNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
Sleep
GetTempFileNameA
SetFileTime
GetFileTime
GetDiskFreeSpaceA
GlobalFlags
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
GetCPInfo
GetOEMCP
LocalFileTimeToFileTime
SystemTimeToFileTime
SetErrorMode
GetCurrentDirectoryA
user32
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
GetScrollInfo
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
RegisterClassA
GetMenu
GetWindowTextLengthA
GetWindowTextA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
IsIconic
GetWindowPlacement
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
PeekMessageA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DestroyCursor
DefDlgProcA
IsWindowUnicode
SetMenuDefaultItem
TrackPopupMenu
GetMenuItemID
IsWindow
SetWindowRgn
GetSysColorBrush
RegisterClassExA
GetClipboardData
DrawTextA
GetMenuState
ShowScrollBar
MapWindowPoints
IntersectRect
CheckMenuRadioItem
SetClassLongA
LoadBitmapA
GetSystemMenu
AppendMenuA
SendDlgItemMessageA
SetDlgItemTextA
IsDialogMessageA
CheckMenuItem
MessageBeep
GetSystemMetrics
DrawEdge
RedrawWindow
SetForegroundWindow
ShowWindow
GetDesktopWindow
SetMenu
CharNextA
DeleteMenu
GetMenuItemCount
EnableMenuItem
GetFocus
GetDlgCtrlID
SetWindowPos
IsWindowVisible
UpdateWindow
ScreenToClient
GetWindow
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
SystemParametersInfoA
GetCursorPos
CopyIcon
PtInRect
KillTimer
GetKeyState
ReleaseCapture
SetCapture
SetTimer
SetRectEmpty
DrawFrameControl
GetCursor
GetClassInfoA
DefWindowProcA
LoadCursorA
wsprintfA
FrameRect
LoadMenuA
LoadImageA
GetIconInfo
GetDC
ReleaseDC
GetSysColor
FillRect
DrawStateA
SetWindowTextA
MoveWindow
SetMenuItemBitmaps
ModifyMenuA
GetMenuCheckMarkDimensions
wvsprintfA
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
GrayStringA
LoadStringA
CharUpperA
IsZoomed
PostQuitMessage
ShowOwnedPopups
ValidateRect
SetWindowContextHelpId
MapDialogRect
LoadAcceleratorsA
TranslateAcceleratorA
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
SetCursorPos
SetParent
IsRectEmpty
GetClassNameA
MessageBoxA
PostMessageA
FindWindowA
SendMessageA
EnableWindow
DispatchMessageA
TranslateMessage
GetMessageA
LoadIconA
SetRect
DestroyMenu
OffsetRect
GetClientRect
CopyRect
InflateRect
DrawFocusRect
GetWindowRect
GetSubMenu
TrackPopupMenuEx
ClientToScreen
WindowFromPoint
PostThreadMessageA
RegisterClipboardFormatA
LockWindowUpdate
GetDCEx
InvertRect
GetNextDlgGroupItem
CopyAcceleratorTableA
DrawIconEx
GetActiveWindow
InvalidateRect
SetCursor
GetParent
GetNextDlgTabItem
GetWindowLongA
DestroyIcon
gdi32
GetClipBox
GetTextExtentPointA
LPtoDP
GetBkColor
GetTextColor
CreateFontA
GetCharWidthA
GetTextMetricsA
DPtoLP
CreateRectRgnIndirect
SetRectRgn
PatBlt
GetMapMode
Escape
RectVisible
PtVisible
CreatePatternBrush
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
SetTextAlign
LineTo
MoveToEx
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
RestoreDC
SaveDC
CreateDIBitmap
CreatePen
RoundRect
SetBkMode
TextOutA
CreateRectRgn
CombineRgn
CreateSolidBrush
ExtTextOutA
StretchDIBits
CreateDIBSection
GetTextExtentPoint32A
SetPixelV
StretchBlt
PtInRegion
CreateFontIndirectA
Rectangle
PlgBlt
FillRgn
CreatePolygonRgn
GetObjectA
GetPixel
CreateBitmap
SelectObject
SetBkColor
SetTextColor
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetStockObject
DeleteObject
comdlg32
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
winspool.drv
OpenPrinterA
ClosePrinter
DocumentPropertiesA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegDeleteValueA
RegCreateKeyA
RegSetValueA
shell32
ord71
SHGetFileInfoA
ShellExecuteExA
DragFinish
DragQueryFileA
ShellExecuteA
Shell_NotifyIconA
ExtractIconA
comctl32
ImageList_Create
_TrackMouseEvent
ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_Destroy
ord17
oledlg
ord8
ole32
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoUninitialize
CoInitialize
olepro32
ord253
oleaut32
SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
SysStringLen
SysAllocStringByteLen
SysAllocString
VariantChangeType
VariantCopy
shlwapi
SHAutoComplete
PathRemoveFileSpecA
ws2_32
ioctlsocket
socket
listen
bind
WSAEventSelect
WSACreateEvent
WSASocketA
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSAIoctl
setsockopt
WSAGetLastError
accept
WSARecv
WSASend
WSACloseEvent
inet_ntoa
gethostbyname
htons
connect
select
closesocket
getpeername
WSAStartup
gethostname
WSACleanup
pdh
PdhCollectQueryData
PdhAddCounterA
PdhCloseQuery
PdhGetFormattedCounterValue
PdhOpenQueryA
avifil32
AVIFileRelease
AVIStreamWrite
AVIFileOpenA
AVIFileCreateStreamA
AVIStreamSetFormat
AVIFileExit
AVIFileInit
AVIStreamRelease
msvfw32
DrawDibClose
DrawDibOpen
ICDecompress
ICSeqCompressFrameStart
ICSendMessage
ICOpen
ICClose
ICCompressorFree
ICSeqCompressFrameEnd
DrawDibDraw
wininet
InternetSetStatusCallback
InternetGetLastResponseInfoA
FtpPutFileA
InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetConnectA
winmm
sndPlaySoundA
waveOutClose
waveOutUnprepareHeader
waveOutReset
waveInClose
waveInUnprepareHeader
waveInStop
waveOutWrite
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveInOpen
waveInGetNumDevs
waveOutPrepareHeader
waveOutOpen
waveOutGetNumDevs
PlaySoundA
waveInReset
Sections
.text Size: 585KB - Virtual size: 584KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Audio Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ