Static task
static1
Behavioral task
behavioral1
Sample
b25547a135d07c03245501942bb89d60_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
b25547a135d07c03245501942bb89d60_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b25547a135d07c03245501942bb89d60_JaffaCakes118
-
Size
284KB
-
MD5
b25547a135d07c03245501942bb89d60
-
SHA1
202c74eefd58c92366dc9af4bbcc1ae77de2e260
-
SHA256
9099b8679f22ebc3c23af131dc812ee4ef783482bce97cbab95673f000384ad9
-
SHA512
c4d5f4abaeb68051c75c4943245d477c94b0f051c849ece32bfaebdf7a11844e6a02cd03b8aece6fd6e4c465b939ae744039ba7b9f89e59f7cac3f43ff6a69eb
-
SSDEEP
6144:yqnyqA3mXlVbaAUuLj91Alh4Kv/B8ObPOMSYejZ0aLI4Xu77+E:yubaKj91AlhV/eOrOMSfjHuV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b25547a135d07c03245501942bb89d60_JaffaCakes118
Files
-
b25547a135d07c03245501942bb89d60_JaffaCakes118.exe windows:4 windows x86 arch:x86
10f4bc8d9fec165e99be7e63c27e90dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCloseHandle
InternetQueryDataAvailable
InternetOpenUrlW
InternetOpenW
InternetReadFile
kernel32
SetErrorMode
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesW
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetSystemTimeAsFileTime
ExitProcess
RtlUnwind
RaiseException
HeapReAlloc
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
TlsFree
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetModuleHandleA
GlobalFlags
InterlockedIncrement
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GetCurrentProcessId
GlobalAddAtomW
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
CloseHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
SetLastError
GetThreadLocale
WritePrivateProfileStringW
FreeResource
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
lstrcmpW
FreeLibrary
GlobalDeleteAtom
GetModuleHandleW
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
MulDiv
LocalFree
WideCharToMultiByte
lstrlenA
GetTickCount
Sleep
ReleaseMutex
GetLastError
CreateMutexW
LockResource
LoadLibraryW
GetProcAddress
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
GetModuleFileNameW
lstrlenW
InterlockedDecrement
GetEnvironmentStrings
user32
RegisterClipboardFormatW
PostThreadMessageW
SetRect
IsRectEmpty
CopyAcceleratorTableW
CharNextW
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
ReleaseCapture
SetCapture
ClientToScreen
LoadCursorW
GetDC
ReleaseDC
GetSysColorBrush
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
UnregisterClassW
SetFocus
GetWindowTextW
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindowThreadProcessId
GetLastActivePopup
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
DestroyMenu
EnableMenuItem
CheckMenuItem
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
RemovePropW
InvalidateRect
CharUpperW
GetDesktopWindow
GetActiveWindow
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
SendMessageW
EndDialog
GetWindow
SetWindowContextHelpId
GetParent
MapDialogRect
SetWindowPos
PostQuitMessage
PostMessageW
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
EnableWindow
MessageBoxW
GetClientRect
UnregisterClassA
gdi32
ExtSelectClipRgn
DeleteDC
GetStockObject
SelectObject
GetBkColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetTextColor
GetDeviceCaps
GetWindowExtEx
GetViewportExtEx
SetMapMode
RestoreDC
SaveDC
DeleteObject
GetObjectW
SetViewportOrgEx
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
RegSetValueExW
RegQueryValueW
RegEnumKeyW
RegOpenKeyW
RegDeleteKeyW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
comctl32
InitCommonControlsEx
shlwapi
PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathFindFileNameW
oledlg
OleUIBusyW
ole32
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromProgID
CoTaskMemAlloc
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
CLSIDFromString
CoUninitialize
CoCreateInstance
CoTaskMemFree
CoRegisterMessageFilter
OleFlushClipboard
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
OleIsCurrentClipboard
CoRevokeClassObject
oleaut32
SafeArrayDestroy
VariantCopy
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
SysStringLen
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SysFreeString
Sections
.text Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 748B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ