Static task
static1
Behavioral task
behavioral1
Sample
a2578de5dc6a0f69accd2cbb1b4d3b24_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a2578de5dc6a0f69accd2cbb1b4d3b24_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a2578de5dc6a0f69accd2cbb1b4d3b24_JaffaCakes118
-
Size
332KB
-
MD5
a2578de5dc6a0f69accd2cbb1b4d3b24
-
SHA1
25e4e1a94bbcef3310e58bfb3748f4a8a6cf62c2
-
SHA256
d3a4b9f26b30a655a13a4076d22bbca1d934a1816fc64b7bccfb7a6f50bf072f
-
SHA512
b39c716e04b33ea5deb47bce6d1a6ee8f96476aee5c558bc9168204e77568ba4088a27caca1af8723ec1bfb98ffec59be38dfa0d0183e7ad682310e9a8603405
-
SSDEEP
6144:TBOFkjw9WyTZggtQ4YR7UUK4AtLYmzhsMMGe/EwwRag5rMOmE//OaRURL5thIN:4kc9lTpQ4YOU2tLPTXD4tE+aKZ/hI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a2578de5dc6a0f69accd2cbb1b4d3b24_JaffaCakes118
Files
-
a2578de5dc6a0f69accd2cbb1b4d3b24_JaffaCakes118.exe windows:5 windows x86 arch:x86
45083a20fbd1a4f4ffd89e6fbae2c4be
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
LdrGetDllHandle
NtAllocateVirtualMemory
RtlUshortByteSwap
kernel32
SizeofResource
CompareStringA
LeaveCriticalSection
GetAtomNameW
FreeLibrary
QueryPerformanceCounter
HeapFree
SetThreadExecutionState
UnmapViewOfFile
EnumUILanguagesW
CopyFileW
SetCurrentDirectoryA
InterlockedExchange
InterlockedDecrement
TerminateProcess
CreateFileMappingA
WaitForSingleObject
GetCurrentProcessId
GetTimeFormatW
RemoveDirectoryW
EnterCriticalSection
ResetEvent
HeapReAlloc
VirtualAlloc
LocalReAlloc
GetPrivateProfileSectionNamesW
TlsFree
CreateFileMappingW
GetFileSize
InitializeCriticalSection
GetProcessHeap
SetFilePointer
GetVersion
SetUnhandledExceptionFilter
GlobalSize
GlobalLock
WaitForMultipleObjects
WaitForSingleObjectEx
GetUserDefaultLCID
GetLastError
MoveFileExW
GetACP
GlobalReAlloc
OpenMutexA
GetSystemTime
GlobalAddAtomA
SetCurrentDirectoryW
GlobalFlags
SearchPathW
GetLocalTime
GetFileAttributesW
GetCurrentThreadId
lstrcmpW
DeleteFileW
LocalAlloc
SetErrorMode
GetEnvironmentVariableW
OpenProcess
InterlockedIncrement
FindClose
GetThreadPriority
lstrlenW
GetLogicalDriveStringsW
WritePrivateProfileSectionW
TlsGetValue
SetFileAttributesW
LoadLibraryA
FileTimeToSystemTime
SetEndOfFile
LoadLibraryW
MapViewOfFile
SetEvent
lstrlenA
ExitProcess
GetSystemTimeAsFileTime
GetDateFormatW
CompareFileTime
SetFileTime
DuplicateHandle
QueryDosDeviceW
GetFileAttributesA
GetSystemInfo
MultiByteToWideChar
CreateDirectoryA
WideCharToMultiByte
GlobalDeleteAtom
GetTempFileNameW
GetFileInformationByHandle
GetTickCount
LCMapStringW
IsWow64Process
LoadResource
SetEnvironmentVariableW
CreateMutexA
GetCurrentThread
GetShortPathNameW
GetProcAddress
lstrcmpiA
DebugBreak
FindFirstFileW
SetProcessShutdownParameters
OpenEventW
GetFileAttributesExW
SystemTimeToFileTime
SetThreadPriority
AddAtomW
WriteFile
InterlockedCompareExchange
ResumeThread
VirtualFree
LocalFree
MulDiv
OutputDebugStringA
ReleaseSemaphore
GlobalUnlock
ExpandEnvironmentStringsA
GlobalAlloc
HeapDestroy
QueueUserWorkItem
UnlockFileEx
GetTempPathW
UnhandledExceptionFilter
GetSystemWow64DirectoryW
VirtualQuery
HeapAlloc
LocalSize
VirtualProtect
SetLastError
FlushInstructionCache
GetUserDefaultUILanguage
GetVersionExA
DeactivateActCtx
GetFullPathNameW
CreateMutexW
GetModuleHandleW
TlsSetValue
GetLongPathNameW
GetCPInfo
OpenMutexW
TryEnterCriticalSection
ReleaseMutex
DeleteCriticalSection
DeleteTimerQueueTimer
GetWindowsDirectoryW
lstrcmpA
LockResource
GetSystemDefaultUILanguage
GetSystemDefaultLCID
ReleaseActCtx
SetProcessWorkingSetSize
GetExitCodeThread
GetModuleHandleExA
Process32FirstW
GlobalAddAtomW
CreateFileW
LoadLibraryExW
GlobalFree
CreateEventA
Sleep
GetLocaleInfoW
SetFilePointerEx
HeapCreate
WritePrivateProfileStringW
GetModuleHandleExW
GetPrivateProfileSectionW
FileTimeToLocalFileTime
GetThreadLocale
GetSystemDirectoryW
FindNextFileW
GetModuleFileNameW
MoveFileW
GetCurrentDirectoryW
LockFileEx
GetPrivateProfileStringW
GetNumberFormatW
FindAtomW
InitializeCriticalSectionAndSpinCount
SetThreadContext
SuspendThread
lstrcmpiW
CompareStringW
CloseHandle
CreateActCtxW
FormatMessageW
CreateToolhelp32Snapshot
ReplaceFileW
GetVersionExW
FreeLibraryAndExitThread
CreateEventW
ExpandEnvironmentStringsW
Process32NextW
CreateFileA
ActivateActCtx
GetModuleFileNameA
IsDBCSLeadByte
LocalFileTimeToFileTime
DeleteAtom
GetModuleHandleA
FindResourceW
GetSystemDirectoryA
GetFileSizeEx
CreateTimerQueueTimer
CreateSemaphoreW
CreateDirectoryW
QueryPerformanceFrequency
GetPrivateProfileStringA
TerminateThread
ReadFile
CreateProcessW
TlsAlloc
CreateThread
GetThreadContext
GetCurrentProcess
DisableThreadLibraryCalls
FindResourceExW
RaiseException
user32
SetPropW
CharPrevW
LoadMenuW
GetMessagePos
GetTopWindow
IsMenu
AnimateWindow
GetMenuItemInfoW
MessageBeep
DrawTextExW
DdeCreateStringHandleW
GetWindowTextLengthW
GetDialogBaseUnits
CheckMenuItem
FindWindowW
EnumChildWindows
IsChild
GetMessageA
DialogBoxParamW
MonitorFromRect
IsIconic
BeginPaint
PostMessageW
EmptyClipboard
AttachThreadInput
IsDlgButtonChecked
SetFocus
PostQuitMessage
PeekMessageA
RegisterClipboardFormatA
DestroyAcceleratorTable
GetMenuItemInfoA
IsDialogMessageW
GetActiveWindow
LoadCursorA
DrawIconEx
DialogBoxIndirectParamA
SetWindowLongW
MonitorFromPoint
DialogBoxIndirectParamW
SetMenuItemBitmaps
LoadImageW
EndPaint
GetPropA
CharNextA
UnionRect
KillTimer
VkKeyScanExW
ShowScrollBar
SetScrollPos
GetSysColorBrush
GetMenuState
SetMenu
DdeQueryStringW
MessageBoxW
CreateIconIndirect
CallWindowProcW
MessageBoxExW
MonitorFromWindow
CharLowerW
EnumWindows
GetPropW
DrawEdge
ShowCaret
ReleaseDC
CreateDialogParamW
SetWindowPos
GetMonitorInfoW
GetCursor
TranslateAcceleratorW
SystemParametersInfoA
SendNotifyMessageW
GetParent
SetClipboardData
CopyRect
GetWindowThreadProcessId
EndDialog
EnumThreadWindows
DdeGetData
PostThreadMessageA
IsWindow
GetWindowDC
GetMenuDefaultItem
GetForegroundWindow
RegisterClassExW
BeginDeferWindowPos
GetWindowRgnBox
PostMessageA
LoadIconW
GetSystemMenu
GetWindowLongW
FillRect
RemovePropW
CreateMenu
WaitMessage
EqualRect
DdeUninitialize
WindowFromPoint
SetMenuItemInfoW
EndDeferWindowPos
DefWindowProcA
GetClientRect
SendDlgItemMessageW
InsertMenuItemW
SetActiveWindow
DdeFreeStringHandle
MsgWaitForMultipleObjects
CheckRadioButton
FindWindowA
DispatchMessageA
GetClassInfoW
AdjustWindowRectEx
TrackMouseEvent
UnhookWindowsHookEx
DrawFocusRect
ShowWindow
CharLowerBuffW
LockSetForegroundWindow
GetClipboardData
IsWindowUnicode
SendMessageTimeoutA
DdeFreeDataHandle
GetDC
DrawFrameControl
ChangeClipboardChain
CheckMenuRadioItem
GetMenuItemID
DispatchMessageW
TrackPopupMenu
PtInRect
GetWindowTextW
SetCapture
MessageBoxIndirectW
CallMsgFilterW
EnumDesktopWindows
SetWindowLongA
GetComboBoxInfo
RegisterClipboardFormatW
SendMessageTimeoutW
RegisterWindowMessageA
DdeCreateDataHandle
CharPrevA
ShowOwnedPopups
DeferWindowPos
GetWindowRect
UpdateWindow
MapDialogRect
SendMessageW
GetClassLongW
AllowSetForegroundWindow
SetWindowPlacement
InflateRect
CopyIcon
GetCursorPos
DeleteMenu
MapWindowPoints
DdeInitializeW
GetDlgItemTextW
InsertMenuW
IntersectRect
AppendMenuW
RedrawWindow
GetWindowInfo
GetWindow
RemoveMenu
SetTimer
GetIconInfo
GetSysColor
UpdateLayeredWindow
EndMenu
SetDlgItemInt
CopyImage
ChildWindowFromPoint
SetParent
GetSubMenu
SetMenuDefaultItem
GetSystemMetrics
GetMenuItemCount
LoadStringW
UnregisterClassW
DefWindowProcW
GetWindowPlacement
GetDlgCtrlID
PeekMessageW
wsprintfW
GetScrollInfo
GetDesktopWindow
GetKeyNameTextW
GetProcessWindowStation
MoveWindow
RegisterClassW
GetMenuStringW
GetAsyncKeyState
EnableWindow
GetWindowLongA
DestroyMenu
CreatePopupMenu
CharNextW
CreateWindowExW
GetLastInputInfo
CloseClipboard
EnumDisplaySettingsW
DestroyIcon
DdeDisconnect
CallNextHookEx
GetClassNameW
GetMessageTime
IsRectEmpty
GetClassInfoExW
GetDoubleClickTime
SetForegroundWindow
MsgWaitForMultipleObjectsEx
GetCapture
HideCaret
GetAncestor
FindWindowExW
DdeClientTransaction
GetShellWindow
ClientToScreen
GetKeyState
MapVirtualKeyW
GetKeyboardLayout
CheckDlgButton
SetRectEmpty
DialogBoxParamA
OffsetRect
SetScrollInfo
SetRect
ReleaseCapture
NotifyWinEvent
GetClipboardFormatNameW
WaitForInputIdle
PostThreadMessageW
SetWindowsHookExW
GetClassWord
EnableMenuItem
GetNextDlgTabItem
IsCharAlphaNumericW
IsHungAppWindow
GetDlgItem
SetDlgItemTextW
SetPropA
LoadStringA
DrawTextW
SetWindowTextW
RemovePropA
SetCursorPos
OpenClipboard
CharUpperW
ScreenToClient
InvalidateRect
SetClipboardViewer
MessageBoxIndirectA
AdjustWindowRect
GetMessageW
LoadCursorW
DestroyWindow
IsWindowEnabled
LoadBitmapW
SetWindowRgn
DdeConnect
TranslateMessage
GetLastActivePopup
LoadAcceleratorsW
DdeNameService
SystemParametersInfoW
SendMessageA
TrackPopupMenuEx
RegisterWindowMessageW
GetFocus
IsWindowVisible
SetCursor
WinHelpW
MessageBoxExA
advapi32
OpenProcessToken
CryptHashData
OpenThreadToken
RegSetValueExW
RegQueryValueExW
RegQueryValueExA
GetTraceLoggerHandle
RegCloseKey
RegQueryValueW
CreateProcessAsUserW
RegEnumValueW
RegDeleteKeyW
CryptCreateHash
UnregisterTraceGuids
CryptAcquireContextW
RegEnumKeyW
GetTokenInformation
TraceMessage
SetTokenInformation
GetUserNameW
ConvertStringSidToSidW
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyW
RegOpenKeyExW
RegQueryInfoKeyW
ConvertSidToStringSidW
TraceEvent
RegCreateKeyA
ConvertStringSecurityDescriptorToSecurityDescriptorW
CryptGetHashParam
DuplicateTokenEx
RegDeleteValueW
RegOpenCurrentUser
RegisterTraceGuidsW
CryptDestroyHash
RegDeleteValueA
ImpersonateSelf
IsTextUnicode
SetThreadToken
GetTraceEnableLevel
RegCreateKeyExW
GetTraceEnableFlags
RegEnumValueA
GetLengthSid
RegSetValueExA
CryptReleaseContext
RegEnumKeyExW
RegCreateKeyExA
gdi32
RestoreDC
CreatePatternBrush
CreatePalette
CreateMetaFileW
CreateCompatibleBitmap
CreateRectRgn
SetTextAlign
CombineRgn
GetClipBox
SetWindowExtEx
CreateCompatibleDC
SetBkMode
GetGlyphIndicesW
TextOutA
GetBrushOrgEx
SetTextColor
EqualRgn
GetTextExtentPoint32W
CreateBitmap
GetDCOrgEx
OffsetWindowOrgEx
GetTextExtentExPointI
GetTextMetricsW
GetObjectA
Rectangle
SetStretchBltMode
CreateRectRgnIndirect
CreateDCA
StretchDIBits
CreateDIBPatternBrushPt
SaveDC
SetLayout
RectVisible
SetMapMode
CreateFontIndirectA
GetDIBits
CreateFontW
SetWindowOrgEx
DeleteObject
CreatePen
GetPixel
GetObjectW
CreateDCW
GetPaletteEntries
SetDCPenColor
TextOutW
SetViewportExtEx
GetTextColor
SetBrushOrgEx
LineTo
SelectPalette
PlayEnhMetaFile
OffsetRgn
BitBlt
GetBkColor
CreateFontIndirectW
IntersectClipRect
GetRgnBox
CreateEnhMetaFileA
ExtCreateRegion
DeleteDC
DeleteEnhMetaFile
StretchBlt
CreateHalftonePalette
CreateDIBSection
CloseEnhMetaFile
SelectObject
ExtTextOutW
PatBlt
GetTextAlign
GetTextCharset
GetStockObject
GetTextExtentPoint32A
GetDeviceCaps
SetViewportOrgEx
GetBkMode
RealizePalette
CreateSolidBrush
GetRegionData
GetSystemPaletteEntries
GetLayout
SetRectRgn
LPtoDP
CreatePolygonRgn
SetBkColor
CloseMetaFile
MoveToEx
SetPaletteEntries
GetTextExtentPointW
shell32
ExtractAssociatedIconExW
SHAppBarMessage
ExtractIconExW
SHGetFolderPathAndSubDirW
SHFileOperationW
SHCreateShellItem
ShellExecuteW
SHGetFolderPathW
SHGetFolderLocation
SHGetDesktopFolder
SHSetLocalizedName
SHPathPrepareForWriteW
ExtractIconW
ShellAboutW
Shell_NotifyIconW
ShellExecuteA
DragQueryFileW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetFileInfoW
ShellExecuteExW
SHBrowseForFolderW
SHBindToParent
SHGetSpecialFolderPathW
SHGetInstanceExplorer
SHGetDataFromIDListW
Shell_NotifyIconA
SHChangeNotify
uxtheme
GetThemeMetric
DrawThemeBackground
IsThemeActive
GetThemeBackgroundContentRect
GetThemeColor
GetThemeAppProperties
GetThemeBackgroundExtent
IsAppThemed
OpenThemeData
SetWindowTheme
GetThemePartSize
CloseThemeData
GetThemeMargins
DrawThemeParentBackground
GetThemeFont
psapi
GetProcessImageFileNameW
Sections
.text Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE