Static task
static1
Behavioral task
behavioral1
Sample
a7ffe6b1b48a7ae27022210122b5c62f_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a7ffe6b1b48a7ae27022210122b5c62f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a7ffe6b1b48a7ae27022210122b5c62f_JaffaCakes118
-
Size
580KB
-
MD5
a7ffe6b1b48a7ae27022210122b5c62f
-
SHA1
618e6a355120c69f8c2bb4aaa5c1913e4f983d01
-
SHA256
1bc2364e4c0c74a11dbe9a90de2706fd2ddc6c55b8948a22064aea90484a873c
-
SHA512
c5fb09b2361507266cc25fa0684ea2b26a8dbe11e4a596833119840ea8f547e57cf69baa13722f1c939c3023d4b5b25e8c5801ce98b0edcdd2b3e9c0baec7f46
-
SSDEEP
12288:beWLVtE+CUz9I+Kmqo+xuWSKlsNofz9+AHHX:yWXK+3Z+xuWdlsNofz9tX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a7ffe6b1b48a7ae27022210122b5c62f_JaffaCakes118
Files
-
a7ffe6b1b48a7ae27022210122b5c62f_JaffaCakes118.exe windows:4 windows x86 arch:x86
1097fdc652733a609b553ccb3acf3e49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
rpcrt4
UuidCreate
kernel32
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationW
GetFullPathNameW
GetShortPathNameW
CreateFileW
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesW
GetFileAttributesW
GetFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetCommandLineA
HeapAlloc
GetProcessHeap
GetStartupInfoA
RaiseException
RtlUnwind
HeapReAlloc
ExitThread
CreateThread
HeapSize
ExitProcess
Sleep
HeapDestroy
HeapCreate
VirtualFree
SetFilePointer
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetConsoleCtrlHandler
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
SetEnvironmentVariableA
WriteFile
ReadFile
lstrcmpiW
GetStringTypeExW
DeleteFileW
MoveFileW
SetErrorMode
GetPrivateProfileStringW
WritePrivateProfileStringW
GetPrivateProfileIntW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedExchange
GetModuleHandleA
FreeResource
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryA
GetVersionExA
SystemTimeToFileTime
GetThreadLocale
lstrcmpA
GetAtomNameW
GlobalGetAtomNameW
GlobalFlags
lstrcmpW
CreateEventW
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GetVersion
InterlockedDecrement
GetModuleHandleW
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GlobalFree
CopyFileW
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FindResourceW
LoadResource
LockResource
SizeofResource
MulDiv
SetLastError
GetSystemTime
LocalFree
SetCurrentDirectoryW
GetCurrentDirectoryW
FileTimeToLocalFileTime
GetCurrentThreadId
GetLocalTime
FileTimeToSystemTime
OutputDebugStringW
FormatMessageW
FindNextFileW
FindClose
GetProcAddress
GetLastError
GetTempPathW
lstrlenW
MultiByteToWideChar
CompareStringW
GetModuleFileNameW
lstrcpynW
GetVersionExW
LoadLibraryW
WideCharToMultiByte
FreeLibrary
lstrlenA
FindFirstFileW
GetTempFileNameW
GetCurrentProcessId
CloseHandle
ReleaseMutex
InterlockedCompareExchange
WaitForSingleObject
InterlockedIncrement
CreateMutexW
FatalAppExitA
user32
SetCursor
PostQuitMessage
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
ScrollWindowEx
ShowWindow
MoveWindow
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
SetFocus
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
ShowOwnedPopups
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
EndDialog
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
GetClientRect
GetMenu
PostMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
SetWindowPlacement
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
DeleteMenu
GetDialogBaseUnits
CreateDialogIndirectParamW
EndDeferWindowPos
GetNextDlgTabItem
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetWindowTextLengthW
GetFocus
GetDesktopWindow
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameW
PtInRect
GetWindowTextW
SetWindowTextW
UnregisterClassW
SetWindowsHookExW
DestroyIcon
TrackPopupMenu
CharUpperW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
LoadCursorW
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
GetWindowThreadProcessId
SendMessageW
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
GetMenuItemCount
GetSubMenu
RemoveMenu
GetActiveWindow
IsWindow
MessageBoxW
IsWindowVisible
EnableWindow
EnumThreadWindows
OffsetRect
UnregisterClassA
gdi32
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
DeleteDC
CreateDIBPatternBrushPt
CreatePatternBrush
GetStockObject
SelectPalette
PlayMetaFileRecord
GetObjectType
SetWindowOrgEx
PlayMetaFile
CreatePen
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreateRectRgnIndirect
SetRectRgn
SelectClipPath
CombineRgn
GetMapMode
PatBlt
DPtoLP
GetTextMetricsW
CreateRectRgn
GetClipRgn
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutW
RectVisible
PtVisible
StartDocW
GetPixel
GetWindowExtEx
CopyMetaFileW
EnumMetaFile
GetDeviceCaps
SelectClipRgn
SetColorAdjustment
SetArcDirection
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
MoveToEx
LineTo
OffsetClipRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
ModifyWorldTransform
SetWorldTransform
SetGraphicsMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
GetTextExtentPoint32W
ExtTextOutW
BitBlt
CreateCompatibleDC
CreateFontIndirectW
GetObjectW
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
CreateBitmap
DeleteObject
CreateDCW
GetViewportExtEx
comdlg32
GetFileTitleW
GetSaveFileNameW
GetOpenFileNameW
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyW
RegSetValueW
RegSetValueExW
RegEnumValueW
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegQueryValueExA
RegCreateKeyW
shell32
SHGetFileInfoW
ExtractIconW
ole32
CreateBindCtx
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
ReleaseStgMedium
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemFree
StringFromGUID2
CoTaskMemAlloc
StringFromCLSID
CoTreatAsClass
OleDuplicateData
CoDisconnectObject
CoCreateInstance
CLSIDFromString
WriteClassStg
oleaut32
SafeArrayGetElement
VariantInit
VarBstrFromDate
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
VarDateFromStr
SysAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayCopy
SysFreeString
SysStringLen
SysAllocStringByteLen
SysStringByteLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantClear
SafeArrayRedim
VariantChangeType
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
shlwapi
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathRemoveExtensionW
Sections
.text Size: 456KB - Virtual size: 452KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 620B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ