Static task
static1
Behavioral task
behavioral1
Sample
a971317dc4910034773d111789e994c0_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
a971317dc4910034773d111789e994c0_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
a971317dc4910034773d111789e994c0_JaffaCakes118
-
Size
78KB
-
MD5
a971317dc4910034773d111789e994c0
-
SHA1
c18f8ac72ccc92571baa877646d71aff9cc9ef37
-
SHA256
4bdc0238195e2ce5a3ac2c91fa80790ee40cacd8860f7f514106ae0d6f8baa4e
-
SHA512
c5567573c75b8f44c67d5dd9a35b183035a641cf6d4ce2af09742121354c892b17bffe630727c39ba81375f7ed4ac599e308533fe122e57a70ba9e88b5b18415
-
SSDEEP
1536:B6j8V7OFvGud/x6US+q+akDUoWXh06OxedalMccihDYYXMitq:cIV7kvTdJxSP+BJWxXOxZGccihDYYMiM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a971317dc4910034773d111789e994c0_JaffaCakes118
Files
-
a971317dc4910034773d111789e994c0_JaffaCakes118.exe windows:4 windows x86 arch:x86
43fdedf043c823e6e6d7228854dc6fb5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
VerifyVersionInfoW
WriteProcessMemory
AddAtomA
HeapUnlock
GetFileSizeEx
GetDiskFreeSpaceA
GetConsoleFontSize
EnumDateFormatsExW
HeapWalk
GetLongPathNameW
IsSystemResumeAutomatic
UnmapViewOfFile
WriteConsoleW
GetAtomNameA
GetThreadContext
CreateTapePartition
GetVolumeNameForVolumeMountPointA
LockFileEx
GetNamedPipeHandleStateA
RtlZeroMemory
EnumLanguageGroupLocalesW
SetTapePosition
OpenWaitableTimerA
ExpandEnvironmentStringsA
DosDateTimeToFileTime
OpenEventW
WaitNamedPipeW
FreeLibrary
GetPrivateProfileStringW
GetConsoleAliasesLengthW
MultiByteToWideChar
LCMapStringA
GenerateConsoleCtrlEvent
SwitchToFiber
GlobalWire
RequestDeviceWakeup
RtlUnwind
SetConsoleCursor
RemoveDirectoryA
LoadLibraryW
LoadLibraryExA
GetUserDefaultLCID
FindFirstVolumeW
FindVolumeClose
CreateEventW
EnumResourceTypesA
SetThreadIdealProcessor
EnumDateFormatsA
AllocateUserPhysicalPages
DisableThreadLibraryCalls
lstrcpyW
FindFirstFileExA
FormatMessageA
GetConsoleWindow
GetEnvironmentVariableA
InterlockedExchange
EnumTimeFormatsW
GetEnvironmentStrings
CopyFileW
GetConsoleTitleW
LocalReAlloc
FileTimeToDosDateTime
GetModuleFileNameA
GlobalFindAtomA
CreateNamedPipeW
GetThreadTimes
GetProfileIntA
GetExitCodeProcess
GetCommModemStatus
EnumUILanguagesW
TerminateJobObject
UpdateResourceA
GetCompressedFileSizeW
GetConsoleAliasExesLengthA
SetupComm
InterlockedIncrement
DnsHostnameToComputerNameW
lstrcat
GetOverlappedResult
SleepEx
GetTapeStatus
CreateDirectoryW
EscapeCommFunction
ExitProcess
OpenSemaphoreW
OpenJobObjectA
CopyFileExA
CreateHardLinkW
UnregisterWaitEx
RtlMoveMemory
WriteProfileStringW
HeapReAlloc
SetVolumeMountPointA
IsBadCodePtr
Process32FirstW
Module32First
IsDebuggerPresent
WinExec
Thread32First
UnhandledExceptionFilter
VerifyVersionInfoA
GetPrivateProfileStructA
GlobalSize
CreateFileMappingW
FindFirstVolumeMountPointW
CreateConsoleScreenBuffer
DeleteVolumeMountPointA
SetTimerQueueTimer
GetCalendarInfoW
QueryPerformanceCounter
GetProcessWorkingSetSize
GetFileType
CreateRemoteThread
WriteConsoleOutputA
lstrcmpiW
LocalFree
GetDriveTypeA
WritePrivateProfileStructA
GetDateFormatW
GetComputerNameW
GetTempFileNameA
GetCompressedFileSizeA
OpenFileMappingA
WriteTapemark
SetPriorityClass
FindNextFileW
QueryInformationJobObject
BeginUpdateResourceW
lstrcmp
LocalCompact
LocalSize
_lwrite
FreeEnvironmentStringsA
GetVersionExA
SetUnhandledExceptionFilter
BeginUpdateResourceA
SetCommMask
OpenWaitableTimerW
GetShortPathNameA
DeleteTimerQueue
GetLocaleInfoA
GetCalendarInfoA
BuildCommDCBA
SetComputerNameW
DisconnectNamedPipe
ContinueDebugEvent
GetConsoleAliasA
SetVolumeLabelA
SetMessageWaitingIndicator
FindAtomW
CancelTimerQueueTimer
LoadLibraryA
EraseTape
LeaveCriticalSection
GetNumberOfConsoleInputEvents
ScrollConsoleScreenBufferW
CreateWaitableTimerA
GetTempPathA
InitializeCriticalSection
GetSystemTimeAsFileTime
GetLargestConsoleWindowSize
BindIoCompletionCallback
lstrcpynA
CreateHardLinkA
PeekConsoleInputA
IsDBCSLeadByteEx
SetFileTime
GetUserDefaultLangID
IsBadStringPtrW
GetPriorityClass
GetConsoleAliasW
FreeResource
CreateDirectoryExW
WaitForSingleObjectEx
DebugBreak
OutputDebugStringW
SetTapeParameters
ReadConsoleOutputA
SetFileApisToANSI
IsBadHugeWritePtr
AllocConsole
CreateIoCompletionPort
GetCPInfo
MulDiv
EnumDateFormatsExA
GetProcessVersion
VirtualFree
CommConfigDialogA
SetFilePointerEx
SetSystemTimeAdjustment
LoadModule
GetPrivateProfileIntW
GetFileAttributesA
SearchPathA
GlobalGetAtomNameW
SetProcessWorkingSetSize
WaitCommEvent
GetStringTypeA
QueryPerformanceFrequency
CreateWaitableTimerW
GetWriteWatch
InterlockedDecrement
GetEnvironmentStringsW
SetNamedPipeHandleState
GlobalReAlloc
MoveFileW
VerSetConditionMask
SetEndOfFile
GlobalFlags
MoveFileExA
TerminateProcess
GetStringTypeExA
CompareStringA
GetFileTime
WritePrivateProfileStringA
RequestWakeupLatency
GetConsoleAliasesLengthA
LoadLibraryExW
GlobalAddAtomW
FlushConsoleInputBuffer
EnumSystemCodePagesA
CreateSemaphoreA
CreateMailslotA
SetCalendarInfoW
SetConsoleCursorInfo
GetStringTypeW
FindResourceExA
SetCommState
EnumDateFormatsW
GetProcessAffinityMask
WriteConsoleOutputCharacterW
ReadFileScatter
GetNumberFormatW
SetCurrentDirectoryW
MapUserPhysicalPages
ReadConsoleOutputAttribute
GetBinaryTypeW
TransmitCommChar
Process32NextW
SetFilePointer
Module32Next
GetConsoleCP
FindFirstFileW
PeekConsoleInputW
GetModuleFileNameW
GetProcessShutdownParameters
SetCommConfig
BuildCommDCBAndTimeoutsA
FindResourceA
DeleteFileA
FindNextVolumeMountPointA
EnterCriticalSection
GlobalFree
SetConsoleDisplayMode
GetFileAttributesExW
VirtualAlloc
GetWindowsDirectoryA
GetProcAddress
user32
GetThreadDesktop
DrawTextExW
CloseClipboard
GetWindowModuleFileNameW
DestroyCaret
GetQueueStatus
WinHelpA
IsClipboardFormatAvailable
CharPrevExA
GetParent
CreateDialogParamA
CreateWindowExW
TranslateAcceleratorW
DrawFocusRect
SetCursorPos
DeleteMenu
GetWindowModuleFileNameA
EnumClipboardFormats
OpenClipboard
EnumDisplaySettingsExA
LoadBitmapW
SetProcessDefaultLayout
GetUserObjectSecurity
DefMDIChildProcA
GetWindowTextW
GetWindowRect
GetKeyState
WaitMessage
PackDDElParam
GetPropA
BeginDeferWindowPos
DlgDirSelectComboBoxExW
MessageBoxExA
PostThreadMessageW
SystemParametersInfoA
GetMouseMovePointsEx
GetSystemMenu
SetPropW
WINNLSGetIMEHotkey
ModifyMenuA
GetWindowContextHelpId
MapVirtualKeyExW
EnumDesktopWindows
LoadKeyboardLayoutA
DdeAccessData
SendNotifyMessageA
GetClassInfoW
InvalidateRgn
GetAncestor
SendMessageW
IsCharLowerA
CreateDialogParamW
DlgDirListA
ShowCursor
BroadcastSystemMessageW
GetClipboardOwner
EnumWindowStationsA
IsWindowUnicode
IsDialogMessage
ReleaseCapture
CreateCaret
SetWindowTextW
GetKeyNameTextA
CreateMenu
RealGetWindowClass
DrawStateW
GetClipCursor
GetInputState
GetKeyboardState
SetCaretPos
GetClassNameW
DefFrameProcW
SetLayeredWindowAttributes
VkKeyScanW
CascadeWindows
VkKeyScanExA
GetClassInfoExW
SendMessageTimeoutA
SetClassLongA
BlockInput
GetListBoxInfo
CharPrevW
EnumPropsExA
GetDlgItemTextW
GetNextDlgTabItem
SetMenuItemInfoW
UnregisterDeviceNotification
ArrangeIconicWindows
TranslateAccelerator
CheckMenuItem
SetThreadDesktop
GetDoubleClickTime
TrackPopupMenu
AppendMenuW
CreateIconFromResourceEx
CopyIcon
IsMenu
CheckDlgButton
GetAltTabInfoW
DlgDirListW
IsHungAppWindow
LoadMenuW
DdeFreeStringHandle
SetUserObjectSecurity
SetMenuDefaultItem
GetSystemMetrics
SubtractRect
ShowOwnedPopups
GetWindowTextA
EnumPropsA
BringWindowToTop
EnumDisplaySettingsExW
DdeSetQualityOfService
SendNotifyMessageW
EndTask
EnumPropsExW
EmptyClipboard
GetMessageTime
FindWindowW
SwapMouseButton
LoadMenuIndirectA
DefWindowProcA
SetUserObjectInformationW
SetMenuInfo
RegisterShellHookWindow
CreateMDIWindowA
GetClipboardFormatNameA
HideCaret
OpenDesktopA
GetProcessDefaultLayout
UnhookWindowsHook
DdeQueryStringA
CreateMDIWindowW
AppendMenuA
IsWindowVisible
DrawTextA
MessageBoxIndirectA
TrackPopupMenuEx
ExcludeUpdateRgn
DrawCaption
ChangeMenuA
SwitchToThisWindow
AdjustWindowRect
PaintDesktop
keybd_event
FlashWindowEx
GetMenuDefaultItem
GetMessagePos
DdeConnectList
LockWorkStation
CallMsgFilterA
GetWindowModuleFileName
WindowFromDC
EnumWindowStationsW
EndMenu
GetKeyboardType
GetWindowThreadProcessId
MessageBoxW
ShowScrollBar
GetWindowLongA
MenuItemFromPoint
CreateAcceleratorTableA
CallMsgFilter
GetKeyNameTextW
ReuseDDElParam
InsertMenuItemW
UnloadKeyboardLayout
LoadAcceleratorsA
wsprintfW
CheckMenuRadioItem
GetClipboardData
SetDlgItemTextA
CreateDesktopW
wsprintfA
GetMenuCheckMarkDimensions
GetAltTabInfo
CharPrevA
DefWindowProcW
CharLowerBuffA
IMPSetIMEW
PostQuitMessage
CreateIconIndirect
SendMessageCallbackA
DdeFreeDataHandle
RegisterHotKey
DlgDirSelectExW
LoadCursorA
IsCharLowerW
AnimateWindow
DialogBoxParamA
UpdateWindow
DlgDirSelectExA
SendIMEMessageExA
SetWindowsHookExA
GetTitleBarInfo
SetScrollPos
LoadCursorFromFileA
SetWindowRgn
GetTopWindow
GetWindowTextLengthA
RegisterClassA
GetMenuItemRect
ChangeDisplaySettingsExA
RegisterWindowMessageA
EndDeferWindowPos
PtInRect
CharUpperW
DdeKeepStringHandle
DrawFrame
CreateIconFromResource
DestroyAcceleratorTable
GetDC
CharToOemW
OpenDesktopW
GetMenuItemID
IsDialogMessageA
CreateAcceleratorTableW
ActivateKeyboardLayout
HiliteMenuItem
FindWindowExA
CopyImage
OemToCharA
SetPropA
GetCapture
CharNextW
NotifyWinEvent
DragObject
CallNextHookEx
BeginPaint
GetKeyboardLayoutNameW
TranslateAcceleratorA
DrawStateA
DialogBoxIndirectParamA
SetLastErrorEx
SetSystemCursor
RegisterWindowMessageW
CreateDialogIndirectParamA
msvcrt
memcpy
comdlg32
PrintDlgA
ChooseColorW
ReplaceTextW
ChooseFontW
FindTextA
GetSaveFileNameA
PageSetupDlgA
GetOpenFileNameA
PrintDlgExW
ChooseColorA
GetFileTitleA
CommDlgExtendedError
GetSaveFileNameW
FindTextW
GetFileTitleW
GetOpenFileNameW
ReplaceTextA
PrintDlgW
PageSetupDlgW
PrintDlgExA
ChooseFontA
advapi32
RegOpenKeyExA
shell32
SHGetFolderLocation
DoEnvironmentSubstW
SHInvokePrinterCommandW
SHGetFileInfoA
SHGetSpecialFolderPathW
ExtractIconExW
DragAcceptFiles
SHAddToRecentDocs
SHFileOperationA
ShellAboutA
SHGetDataFromIDListA
ShellExecuteA
FindExecutableW
ExtractIconExA
DoEnvironmentSubstA
DragQueryFile
ShellExecuteEx
SHCreateProcessAsUserW
SHGetPathFromIDListW
SHEmptyRecycleBinW
Shell_NotifyIconW
SHGetPathFromIDListA
SHGetFolderPathW
Shell_NotifyIconA
CheckEscapesW
SHQueryRecycleBinA
SHLoadNonloadedIconOverlayIdentifiers
SHGetSpecialFolderLocation
SHGetFolderPathA
SHLoadInProc
SHGetDiskFreeSpaceExA
ExtractAssociatedIconW
SHCreateDirectoryExW
SHGetInstanceExplorer
SHChangeNotify
SHGetMalloc
SHFileOperation
DragFinish
SHGetFileInfoW
SHGetIconOverlayIndexW
DragQueryFileA
SHGetFileInfo
ShellExecuteExA
SHGetDiskFreeSpaceExW
SHFormatDrive
SHEmptyRecycleBinA
SHFileOperationW
SHAppBarMessage
ExtractIconW
ExtractIconA
SHPathPrepareForWriteW
Shell_NotifyIcon
SHGetDesktopFolder
SHGetDiskFreeSpaceA
ShellAboutW
DragQueryFileW
ExtractAssociatedIconA
ShellExecuteExW
SHGetDataFromIDListW
SHBindToParent
SHBrowseForFolderW
SHQueryRecycleBinW
SHBrowseForFolder
SHFreeNameMappings
SHIsFileAvailableOffline
SHGetIconOverlayIndexA
SHGetSettings
ExtractAssociatedIconExW
DragQueryPoint
CommandLineToArgvW
SHGetPathFromIDList
ExtractAssociatedIconExA
SHCreateDirectoryExA
DuplicateIcon
SHPathPrepareForWriteA
SHGetSpecialFolderPathA
SHBrowseForFolderA
WOWShellExecute
ShellHookProc
FindExecutableA
ExtractIconEx
ShellExecuteW
shlwapi
StrCmpNIW
StrRChrW
StrStrW
StrCmpNA
StrChrIA
StrRChrIW
StrRChrA
StrStrIA
StrChrIW
StrStrA
StrChrW
StrCmpNIA
StrRStrIA
StrRStrIW
StrStrIW
StrChrA
StrCmpNW
StrRChrIA
comctl32
ImageList_Remove
ImageList_DrawIndirect
ord4
FlatSB_SetScrollInfo
ImageList_GetImageInfo
InitCommonControlsEx
FlatSB_GetScrollInfo
ImageList_Draw
ImageList_Destroy
GetMUILanguage
PropertySheetW
InitMUILanguage
ImageList_Replace
ord2
ImageList_ReplaceIcon
FlatSB_GetScrollProp
FlatSB_SetScrollPos
ImageList_EndDrag
ImageList_Copy
ImageList_BeginDrag
ImageList_SetImageCount
_TrackMouseEvent
ord5
CreatePropertySheetPage
ImageList_SetOverlayImage
FlatSB_ShowScrollBar
ImageList_GetBkColor
ImageList_GetIcon
ImageList_SetFilter
ImageList_SetDragCursorImage
ord17
DestroyPropertySheetPage
UninitializeFlatSB
FlatSB_SetScrollProp
PropertySheet
FlatSB_EnableScrollBar
FlatSB_GetScrollRange
PropertySheetA
CreateStatusWindow
ImageList_GetIconSize
ImageList_Read
ImageList_GetDragImage
ImageList_GetImageRect
ImageList_Add
ImageList_Write
ord8
ImageList_SetIconSize
ImageList_AddIcon
CreateStatusWindowW
ImageList_AddMasked
CreateToolbarEx
ImageList_DragMove
ImageList_DragEnter
ImageList_Create
CreatePropertySheetPageA
CreatePropertySheetPageW
ord13
ord6
InitializeFlatSB
ord7
ImageList_LoadImageW
ImageList_GetImageCount
ImageList_Duplicate
FlatSB_GetScrollPos
DrawStatusText
ImageList_LoadImage
ord15
ord14
ImageList_DragLeave
ImageList_DrawEx
ImageList_LoadImageA
DrawStatusTextW
ImageList_Merge
ImageList_DragShowNolock
ord3
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ