Static task
static1
Behavioral task
behavioral1
Sample
aad7c29e118200c8b98f928d59ea0398_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
aad7c29e118200c8b98f928d59ea0398_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
aad7c29e118200c8b98f928d59ea0398_JaffaCakes118
-
Size
332KB
-
MD5
aad7c29e118200c8b98f928d59ea0398
-
SHA1
b7934a663596e4f89c463da2a37b7dfded1dce66
-
SHA256
d305ae6ce975beff189f07a3f68d0d9df2c02bd15c1a90f240df012450f57e8e
-
SHA512
cd607c3623550090767cd95524f9e8722a4b172e1fe9cacf5550cc577e2cbafdd333c82a297bc34e4177e7d871553bec609dc145be753852c60b26882f6ecc01
-
SSDEEP
6144:4WyI2kN4HIy7lQ4re6FeG5gkNZXkygj6txn7N:4pI9OHzzIsgsRkT6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource aad7c29e118200c8b98f928d59ea0398_JaffaCakes118
Files
-
aad7c29e118200c8b98f928d59ea0398_JaffaCakes118.exe windows:4 windows x86 arch:x86
c8580d693ea81f97ed5fe1d654900da4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerLanguageNameA
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA
comctl32
ImageList_DragShowNolock
ImageList_Add
ImageList_DrawEx
DestroyPropertySheetPage
InitCommonControlsEx
ImageList_Draw
ImageList_GetIconSize
CreateToolbarEx
ImageList_Merge
ImageList_GetIcon
ImageList_GetDragImage
ImageList_EndDrag
ImageList_Read
PropertySheetA
ImageList_SetBkColor
ImageList_LoadImageA
ImageList_Write
ImageList_Destroy
ImageList_GetBkColor
ord17
ImageList_DragLeave
CreatePropertySheetPageA
ImageList_AddMasked
ImageList_BeginDrag
_TrackMouseEvent
ImageList_Replace
ImageList_ReplaceIcon
ImageList_DragEnter
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_SetOverlayImage
ImageList_DragMove
ImageList_Create
winspool.drv
EndDocPrinter
StartPagePrinter
OpenPrinterA
DocumentPropertiesA
EnumPrintersA
GetPrinterA
GetPrinterDriverA
WritePrinter
StartDocPrinterA
GetJobA
ClosePrinter
EnumPrinterDriversA
EndPagePrinter
SetPrinterA
ord204
gdi32
SetBrushOrgEx
RoundRect
OffsetViewportOrgEx
RealizePalette
Polygon
GetNearestColor
GetMiterLimit
GetBkColor
ExtSelectClipRgn
FillRgn
CombineRgn
DeleteDC
GetCurrentPositionEx
PtVisible
CreateMetaFileA
SetTextCharacterExtra
GetWindowOrgEx
InvertRgn
PolyPolygon
CreateRectRgn
EnumFontFamiliesExA
DrawEscape
Rectangle
PlgBlt
StrokeAndFillPath
SetDIBitsToDevice
CloseEnhMetaFile
RestoreDC
GetDIBColorTable
GetKerningPairsA
CreatePalette
ExtEscape
PatBlt
GetWindowExtEx
StrokePath
GetAspectRatioFilterEx
DeleteMetaFile
GetDCOrgEx
SetWorldTransform
GetSystemPaletteEntries
CreateICW
CreateHatchBrush
MaskBlt
GetClipBox
EndDoc
GetCurrentObject
SetStretchBltMode
CreateEllipticRgn
GetRegionData
ExtFloodFill
DPtoLP
SetWindowOrgEx
GetColorAdjustment
GetRgnBox
GetTextMetricsW
GetClipRgn
CreateRoundRectRgn
PolyBezier
CreateBitmap
SetAbortProc
CreateSolidBrush
RectVisible
CreatePolyPolygonRgn
EndPage
GetViewportOrgEx
AbortPath
UnrealizeObject
GetTextExtentExPointW
SetGraphicsMode
GetObjectW
SetBoundsRect
CreateEnhMetaFileA
GetCharWidthA
CreateBrushIndirect
GetCharWidthFloatA
CreateFontIndirectA
CreateCompatibleBitmap
SetMiterLimit
SetViewportOrgEx
EnumFontFamiliesA
CreateDiscardableBitmap
GetTextExtentPoint32W
CreateDIBitmap
SetBkColor
GetNearestPaletteIndex
GetStockObject
GetGlyphOutlineA
SetArcDirection
CreateFontW
PolylineTo
OffsetClipRgn
GetTextExtentPointA
TextOutA
GetCharABCWidthsW
Ellipse
GetBitmapBits
ExtCreateRegion
GetBrushOrgEx
Arc
StretchDIBits
GetTextMetricsA
GetDeviceCaps
GetEnhMetaFileA
GetTextFaceA
CreateFontIndirectW
LPtoDP
ScaleWindowExtEx
GetViewportExtEx
ExtCreatePen
GetFontData
ExtTextOutA
AbortDoc
StretchBlt
PtInRegion
GdiComment
CreatePolygonRgn
CreateRectRgnIndirect
TextOutW
CreateDIBSection
SetBkMode
GetCharABCWidthsFloatA
GetROP2
CreatePatternBrush
SelectPalette
Pie
GetObjectType
ExtTextOutW
RectInRegion
EndPath
EqualRgn
CreateDCA
CreateBitmapIndirect
SetTextColor
SetROP2
FillPath
AnimatePalette
GetStretchBltMode
CloseMetaFile
BitBlt
EnumObjects
CreateHalftonePalette
SetWindowExtEx
ResizePalette
IntersectClipRect
CreateEllipticRgnIndirect
GetTextCharacterExtra
AngleArc
SetViewportExtEx
SetPixel
WidenPath
CreateCompatibleDC
ScaleViewportExtEx
DeleteEnhMetaFile
GetBoundsRect
Polyline
GetTextExtentPoint32A
SetMapMode
SetTextAlign
CreateFontA
SetTextJustification
GetPixel
Chord
ResetDCA
GetPolyFillMode
GetDIBits
Escape
PaintRgn
SetEnhMetaFileBits
BeginPath
SelectClipPath
SaveDC
SelectClipRgn
LineTo
DeleteObject
GetTextColor
StartPage
GetCharABCWidthsA
GdiFlush
GetArcDirection
OffsetRgn
SelectObject
PolyBezierTo
EnumFontFamiliesExW
CopyMetaFileA
GetOutlineTextMetricsA
GetPaletteEntries
ExcludeClipRect
FloodFill
SetPolyFillMode
GetMapMode
GetBkMode
SetPixelV
StartDocA
CreatePen
GetObjectA
MoveToEx
SetPaletteEntries
comdlg32
GetOpenFileNameW
GetFileTitleW
ChooseColorA
GetSaveFileNameW
PageSetupDlgW
CommDlgExtendedError
GetFileTitleA
GetSaveFileNameA
PrintDlgA
mfc42
ord1576
advapi32
SetSecurityDescriptorOwner
CryptEncrypt
RegEnumKeyW
RegOpenKeyExA
SetServiceStatus
RegQueryValueW
DeleteAce
OpenSCManagerA
RegCreateKeyA
IsValidSecurityDescriptor
RegQueryValueExA
RegQueryValueExW
InitializeSecurityDescriptor
RegEnumValueA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExW
SetSecurityDescriptorGroup
RegEnumValueW
LookupPrivilegeValueA
RegCreateKeyExW
CloseServiceHandle
CryptHashData
AdjustTokenPrivileges
RegDeleteValueW
DeleteService
RegisterEventSourceA
RegCreateKeyExA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
SetSecurityDescriptorDacl
RegDeleteValueA
RegOpenKeyW
RegDeleteKeyW
StartServiceA
GetAce
OpenProcessToken
InitializeAcl
RegSetValueExW
LookupAccountNameW
RegDeleteKeyA
CryptReleaseContext
CryptDestroyKey
OpenThreadToken
CryptDestroyHash
OpenServiceA
InitiateSystemShutdownA
ControlService
GetUserNameA
DeregisterEventSource
CryptCreateHash
FreeSid
GetTokenInformation
RegEnumKeyExW
CryptAcquireContextA
ReportEventA
CryptGetHashParam
StartServiceCtrlDispatcherA
GetSecurityDescriptorDacl
RegCreateKeyW
RegQueryValueA
ole32
SetConvertStg
CoUninitialize
CreateGenericComposite
GetClassFile
StgIsStorageFile
StgCreateDocfile
WriteClassStm
OleCreateStaticFromData
OleTranslateAccelerator
OleIsRunning
CoRegisterClassObject
OleCreateLinkToFile
OleRegEnumVerbs
OleSetMenuDescriptor
CoLockObjectExternal
RegisterDragDrop
OleRegGetUserType
OleGetClipboard
OleDuplicateData
CoInitializeEx
CoRegisterMessageFilter
CoFreeUnusedLibraries
CoTreatAsClass
StgOpenStorage
OleIsCurrentClipboard
CoCreateInstance
OleCreateFromData
CoDisconnectObject
CoTaskMemFree
StgIsStorageILockBytes
ReleaseStgMedium
WriteClassStg
OleInitialize
CoInitialize
CoGetClassObject
CreateStreamOnHGlobal
CLSIDFromProgID
OleQueryCreateFromData
CoTaskMemRealloc
OleUninitialize
CLSIDFromString
OleDestroyMenuDescriptor
OleSave
IsAccelerator
CoRevokeClassObject
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemAlloc
StringFromGUID2
OleLockRunning
StringFromCLSID
OleCreate
OleQueryLinkFromData
CreateItemMoniker
WriteFmtUserTypeStg
ReadClassStg
OleFlushClipboard
OleGetIconOfClass
CreateBindCtx
OleCreateLinkFromData
GetRunningObjectTable
GetHGlobalFromILockBytes
ReadFmtUserTypeStg
OleCreateFromFile
OleLoad
StgCreateDocfileOnILockBytes
OleRegGetMiscStatus
OleCreateMenuDescriptor
OleRun
CreateDataAdviseHolder
RevokeDragDrop
CreateFileMoniker
kernel32
GlobalUnlock
lstrlenW
CompareStringW
FormatMessageW
GetSystemDefaultLangID
GetCurrentThreadId
FindNextFileA
GetTimeFormatA
IsBadReadPtr
SetFileTime
CreateFileMappingA
GetLocalTime
GetCPInfo
GetUserDefaultLCID
QueryPerformanceCounter
VirtualAlloc
DeleteFileW
FindResourceW
GlobalMemoryStatus
lstrcmpA
LocalReAlloc
GetWindowsDirectoryW
FlushFileBuffers
HeapFree
IsBadWritePtr
ExitProcess
CompareFileTime
FindFirstFileA
GetDriveTypeW
DosDateTimeToFileTime
lstrcmpiA
GetStringTypeExW
GetAtomNameA
TlsGetValue
LocalAlloc
FreeEnvironmentStringsW
GetThreadLocale
GetVersion
GetPrivateProfileIntA
GetOEMCP
Sleep
GetFileSize
SetEndOfFile
HeapDestroy
CreateEventW
MultiByteToWideChar
GetFileAttributesA
GetFileInformationByHandle
GetProcessHeap
GlobalFree
InterlockedIncrement
SetLastError
GetFileAttributesW
GetTempPathA
FindFirstFileW
VirtualQuery
TlsSetValue
GetCurrentDirectoryA
GetModuleHandleA
EnterCriticalSection
FreeEnvironmentStringsA
GlobalFlags
EnumSystemLocalesA
GetEnvironmentStringsW
OpenProcess
GlobalDeleteAtom
ReleaseSemaphore
LoadResource
WriteFile
lstrcatW
HeapReAlloc
LCMapStringA
DeleteCriticalSection
OpenMutexA
IsDebuggerPresent
GlobalAlloc
GetConsoleCP
VirtualFree
IsBadCodePtr
GetCommandLineA
lstrcpyW
GetSystemTimeAsFileTime
SetErrorMode
InterlockedDecrement
InitializeCriticalSection
HeapAlloc
lstrcmpW
GlobalAddAtomA
MoveFileA
GetFullPathNameA
GetCurrentProcess
WinExec
SetThreadPriority
RtlUnwind
FindResourceA
ReadFile
GlobalAddAtomW
SetConsoleCtrlHandler
GetTickCount
ReleaseMutex
GetCommandLineW
EnumResourceLanguagesA
GlobalSize
lstrcpynA
IsValidLocale
TerminateProcess
SetEvent
GetLastError
PeekNamedPipe
GetVersionExA
FileTimeToSystemTime
LoadLibraryW
GetFileTime
GetLocaleInfoW
GetStringTypeA
GlobalHandle
DuplicateHandle
SetUnhandledExceptionFilter
GetPrivateProfileStringA
ExitThread
WaitForMultipleObjects
MapViewOfFile
GetDateFormatA
MoveFileExW
RemoveDirectoryA
GlobalFindAtomA
FreeResource
GetCurrentThread
ResumeThread
FindClose
GetProcessVersion
LocalFree
GetDriveTypeA
SetFileAttributesW
GetProfileStringA
GetModuleFileNameA
SetStdHandle
GetEnvironmentVariableA
SizeofResource
WritePrivateProfileStringA
GetConsoleOutputCP
TlsAlloc
RaiseException
LoadLibraryA
LCMapStringW
GetVolumeInformationW
HeapCreate
GetExitCodeProcess
InterlockedExchange
DeleteFileA
lstrlenA
GetSystemTime
GetStartupInfoW
GetStdHandle
IsValidCodePage
TlsFree
GetModuleFileNameW
GetSystemDirectoryA
GetCurrentProcessId
CompareStringA
FreeLibrary
WideCharToMultiByte
MulDiv
CloseHandle
GetPrivateProfileIntW
GetStartupInfoA
ConvertDefaultLocale
GetEnvironmentStrings
SetEnvironmentVariableA
LoadLibraryExA
HeapSize
GetConsoleMode
GlobalGetAtomNameA
GetLocaleInfoA
CopyFileA
CreateDirectoryA
CreateFileW
lstrcatA
GetFullPathNameW
LeaveCriticalSection
GetModuleHandleW
SetFilePointer
CreateThread
CreateMutexA
FormatMessageA
UnhandledExceptionFilter
GetThreadPriority
SetHandleCount
FatalAppExitA
GetFileType
WriteConsoleA
CreateDirectoryW
GetTimeZoneInformation
UnmapViewOfFile
CreateEventA
SetFileAttributesA
GetStringTypeW
GetACP
lstrcpyA
_lread
GetProcAddress
VirtualProtect
GetSystemInfo
user32
LoadCursorW
wsprintfW
BringWindowToTop
GetMenuItemRect
MessageBeep
DrawTextExA
LoadMenuA
SetCapture
GetDlgItemTextA
GetTopWindow
KillTimer
CopyIcon
GetUpdateRect
SetWindowTextW
GetDlgItemInt
DdeFreeStringHandle
CreateWindowExW
DestroyCursor
GetClassLongA
ChildWindowFromPointEx
RedrawWindow
GetScrollPos
DeferWindowPos
GetWindowTextW
GetForegroundWindow
SetWindowRgn
GetCapture
LoadBitmapA
DrawMenuBar
InvalidateRect
ChildWindowFromPoint
GetAncestor
GetClipboardData
MessageBoxW
PostMessageW
IsWindowEnabled
GrayStringA
LoadIconA
ReuseDDElParam
SetWindowPlacement
ReleaseCapture
WinHelpW
SystemParametersInfoA
GetSysColor
GetClassNameW
GetWindow
IsRectEmpty
SetRect
DestroyIcon
MapDialogRect
TranslateAcceleratorA
MessageBoxA
LoadImageA
GetTabbedTextExtentA
GetKeyState
PostThreadMessageA
SetWindowsHookExA
GetMessageA
FindWindowA
GetDCEx
IsMenu
SetMenuItemInfoA
InvertRect
SendNotifyMessageA
GetWindowTextLengthW
SetCaretPos
CopyRect
CharLowerA
ModifyMenuA
FrameRect
DrawTextA
GetWindowThreadProcessId
EndDialog
IsWindow
DrawStateA
CallNextHookEx
HideCaret
CharLowerW
GetMenuState
AppendMenuW
GetMessagePos
EqualRect
IsWindowUnicode
GetScrollRange
WindowFromPoint
DefWindowProcA
GetLastActivePopup
GetActiveWindow
SetMenuDefaultItem
GetParent
RegisterClassA
InflateRect
RemovePropA
SetPropA
DestroyAcceleratorTable
SendMessageA
GetMenuItemInfoA
PostQuitMessage
GetMenuStringA
DefWindowProcW
SendNotifyMessageW
RegisterClipboardFormatW
SetParent
GetIconInfo
UnpackDDElParam
GetWindowDC
GetDoubleClickTime
SetForegroundWindow
CreateIconIndirect
GetClassLongW
ModifyMenuW
SetClipboardData
SetWindowPos
GetClipboardFormatNameW
LoadBitmapW
GetDC
MoveWindow
RegisterClassExA
SetClassLongA
GetMenuItemCount
SetActiveWindow
wvsprintfA
CreateIconFromResourceEx
GetDesktopWindow
GetSysColorBrush
TrackPopupMenu
AppendMenuA
ScrollWindow
CreatePopupMenu
SystemParametersInfoW
TrackMouseEvent
CharNextA
GetWindowLongW
DrawEdge
SetWindowContextHelpId
DdeNameService
GetAsyncKeyState
GetScrollInfo
PeekMessageA
SetFocus
IsDialogMessageW
MonitorFromRect
IsIconic
RegisterWindowMessageA
LockWindowUpdate
SetCursorPos
CheckRadioButton
SetRectEmpty
ExcludeUpdateRgn
CreateMenu
SetScrollRange
ShowScrollBar
IsWindowVisible
PeekMessageW
DrawFrameControl
GetDlgItem
SetTimer
GetSubMenu
LoadCursorA
CharUpperA
ChangeClipboardChain
DeleteMenu
EndPaint
SetCursor
SetMenu
GetWindowLongA
TrackPopupMenuEx
GetPropA
SetDlgItemTextA
OemToCharA
PostMessageA
EnableMenuItem
AdjustWindowRectEx
FindWindowW
InsertMenuItemA
LoadStringA
UnregisterClassA
MapWindowPoints
GetClassNameA
ScreenToClient
DrawIconEx
SetMenuItemBitmaps
GetWindowPlacement
GetNextDlgGroupItem
WinHelpA
GetDlgCtrlID
MapVirtualKeyA
BeginPaint
CreateWindowExA
EnableWindow
OpenClipboard
GetSystemMenu
ClientToScreen
EmptyClipboard
CheckMenuItem
FillRect
UnionRect
GetClientRect
TabbedTextOutA
CallWindowProcA
ReleaseDC
CreateDialogIndirectParamA
GetMenuItemID
UnregisterClassW
DestroyMenu
DestroyWindow
CharUpperW
SendDlgItemMessageA
CreateCaret
PtInRect
SetPropW
IsDialogMessageA
SetWindowLongW
GetFocus
TranslateMessage
GetKeyboardState
GetWindowTextLengthA
GetCursorPos
GetMessageTime
ExitWindowsEx
DrawIcon
IsClipboardFormatAvailable
SetWindowLongA
ValidateRect
GetSystemMetrics
IntersectRect
IsDlgButtonChecked
SetScrollPos
SetDlgItemTextW
DdeGetData
TranslateMDISysAccel
IsChild
DrawFocusRect
DispatchMessageA
InsertMenuA
SetScrollInfo
GetMenu
ShowWindow
GetClassInfoA
UpdateWindow
GetClassInfoExA
RemoveMenu
DispatchMessageW
GetKeyboardLayoutList
Sections
.text Size: 80KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 88KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ