Static task
static1
Behavioral task
behavioral1
Sample
a32aed3034825d20e0f727088e2e0a4f_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
a32aed3034825d20e0f727088e2e0a4f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a32aed3034825d20e0f727088e2e0a4f_JaffaCakes118
-
Size
1.4MB
-
MD5
a32aed3034825d20e0f727088e2e0a4f
-
SHA1
5b23710d6a28b9289ebfeccb955b7edb02a9f0ef
-
SHA256
4f792ffffc37176401a930878116435e69d012f2859d5b14e814963e54acdc3a
-
SHA512
ecde56cc5ed881ba82cfb95650c81f68ad89b1f80bce0f4d3e1c1d5bed4a3a9d51569aae9c82af0582253fee8c2a5045ae0624a83c72a340f92b3c4d3bc26bc4
-
SSDEEP
24576:3eeE2ElkoOLfnNxY6JcXGb0wojjRfu4k21cv8ttJPJcNw:d5JcXGanR62Cv8ttKw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a32aed3034825d20e0f727088e2e0a4f_JaffaCakes118
Files
-
a32aed3034825d20e0f727088e2e0a4f_JaffaCakes118.exe windows:4 windows x86 arch:x86
7ae2eb5447438a7c2fefecc899e03429
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
kernel32
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetCPInfo
GetOEMCP
GetFileAttributesA
GetFileTime
SetErrorMode
RtlUnwind
GetTimeZoneInformation
RaiseException
HeapReAlloc
GetStartupInfoA
GetCommandLineA
ExitProcess
GetACP
InitializeCriticalSection
ExitThread
TerminateProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
SetStdHandle
GetFileType
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProcessVersion
ReleaseMutex
CreateMutexA
WritePrivateProfileStringA
GetPrivateProfileStringA
lstrcmpA
GetCurrentThread
GetThreadLocale
GetFullPathNameA
GetVolumeInformationA
DeleteFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
DuplicateHandle
MulDiv
FindNextFileA
FindFirstFileA
SetLastError
FindClose
SuspendThread
SetThreadPriority
InterlockedExchange
GetProfileStringA
ResumeThread
SetEvent
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
VirtualProtect
GetCurrentDirectoryA
SetCurrentDirectoryA
IsBadWritePtr
GetVersion
LocalAlloc
LocalFree
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetWindowsDirectoryA
FormatMessageA
SizeofResource
GetSystemDefaultLangID
FindResourceA
LoadResource
LockResource
WideCharToMultiByte
MultiByteToWideChar
lstrcpynA
SetProcessWorkingSetSize
VirtualLock
GlobalMemoryStatus
OpenProcess
GetLocalTime
GetModuleFileNameA
GetLocaleInfoA
InterlockedDecrement
InterlockedIncrement
GetCurrentProcessId
GlobalLock
GlobalUnlock
GetFileSize
ReadFile
SetFilePointer
QueryPerformanceFrequency
QueryPerformanceCounter
WriteFile
lstrcmpiA
GetModuleHandleA
GetLastError
WaitForSingleObject
CreateEventA
ResetEvent
DeviceIoControl
GetLogicalDrives
GetDriveTypeA
QueryDosDeviceA
CreateFileA
CloseHandle
GetProcAddress
GetSystemDirectoryA
GetVersionExA
GetCurrentProcess
SetPriorityClass
HeapFree
GetProcessHeap
HeapAlloc
Sleep
GlobalSize
LoadLibraryA
FreeLibrary
GlobalAlloc
GlobalReAlloc
GlobalFree
CopyFileA
GetTickCount
GetSystemTime
GetTempPathA
CreateThread
user32
RegisterClipboardFormatA
PostThreadMessageA
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckRadioButton
EndDialog
CreateDialogIndirectParamA
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
GetNextDlgTabItem
SendDlgItemMessageA
MapWindowPoints
AdjustWindowRectEx
IsWindowVisible
GetTopWindow
GetClassInfoA
RegisterClassA
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
UnhookWindowsHookEx
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
IntersectRect
GetWindowPlacement
MapDialogRect
ShowWindow
GetActiveWindow
SetActiveWindow
SetFocus
GetDlgItem
IsWindowEnabled
GetClassNameA
WinHelpA
PostMessageA
IsChild
GetDesktopWindow
CopyIcon
IsWindow
MessageBeep
DestroyCursor
CharUpperA
SetRect
AdjustWindowRect
LoadStringA
GetSysColorBrush
CopyRect
GetWindow
IsMenu
ScreenToClient
FillRect
GetFocus
DrawEdge
RegisterWindowMessageA
GrayStringA
DrawTextA
TabbedTextOutA
RemoveMenu
SetCursor
UpdateWindow
RedrawWindow
GetDialogBaseUnits
MsgWaitForMultipleObjects
DispatchMessageA
PeekMessageA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
WindowFromPoint
DestroyMenu
SetWindowContextHelpId
TranslateMessage
LoadImageA
MessageBoxA
LoadMenuA
GetCursorPos
TrackPopupMenu
GetParent
wsprintfA
GetSysColor
DrawStateA
GetKeyState
EnableMenuItem
IsIconic
DrawIcon
GetSystemMenu
AppendMenuA
GetMenu
GetSubMenu
GetMenuItemCount
GetMenuStringA
GetMenuItemID
ModifyMenuA
LoadBitmapA
LoadCursorA
ClientToScreen
GetCapture
PostQuitMessage
ReleaseCapture
SetWindowPos
SetCapture
PtInRect
GetPropA
SetPropA
SetWindowLongA
GetWindowLongA
GetSystemMetrics
CallWindowProcA
GetWindowDC
DrawFrameControl
InflateRect
OffsetRect
DrawIconEx
GetWindowRect
IsRectEmpty
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetDC
GetClientRect
ReleaseDC
EnableWindow
SetTimer
KillTimer
InvalidateRect
LoadIconA
SendMessageA
EndPaint
BeginPaint
GetMessageA
ValidateRect
wvsprintfA
SystemParametersInfoA
GetAsyncKeyState
gdi32
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
GetTextFaceA
IntersectClipRect
SetViewportExtEx
GetViewportExtEx
GetWindowExtEx
GetMapMode
DPtoLP
GetTextColor
LPtoDP
CreateDIBitmap
GetTextExtentPointA
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SelectPalette
RestoreDC
SaveDC
CreateBitmap
PatBlt
GetClipBox
RealizePalette
GetDIBits
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
GetObjectA
GetBitmapBits
DeleteObject
CreateFontA
CreateRectRgn
Escape
ExtTextOutA
RectVisible
PtVisible
GetBkColor
GetCurrentObject
DeleteDC
GetStockObject
CreateFontIndirectA
Polygon
MoveToEx
LineTo
SetTextColor
SetPixel
Ellipse
SetBkColor
SetTextAlign
TextOutA
GetTextExtentPoint32A
CreatePen
CreateSolidBrush
Rectangle
SetBkMode
CreateRectRgnIndirect
CombineRgn
GetDeviceCaps
GetSystemPaletteEntries
CreatePalette
comdlg32
ChooseColorA
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
shell32
SHGetFileInfoA
SHGetPathFromIDListA
ShellExecuteA
SHGetMalloc
SHBrowseForFolderA
SHGetSpecialFolderLocation
comctl32
ImageList_DrawIndirect
ImageList_Create
ImageList_Destroy
CreatePropertySheetPageA
DestroyPropertySheetPage
PropertySheetA
ImageList_GetImageCount
ImageList_Remove
ord17
ImageList_GetImageInfo
ImageList_GetBkColor
ImageList_SetBkColor
ImageList_Draw
ImageList_AddMasked
ImageList_ReplaceIcon
oledlg
ord8
ole32
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleFlushClipboard
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoUninitialize
CoInitializeEx
CoCreateInstance
OleIsCurrentClipboard
CoRegisterMessageFilter
CoRevokeClassObject
CoTaskMemAlloc
olepro32
ord253
oleaut32
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysFreeString
SysAllocString
Sections
.text Size: 752KB - Virtual size: 749KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 104KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 448KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE