Static task
static1
Behavioral task
behavioral1
Sample
b6d7be1470a3cbe7ace917302fe2567b_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b6d7be1470a3cbe7ace917302fe2567b_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b6d7be1470a3cbe7ace917302fe2567b_JaffaCakes118
-
Size
5.5MB
-
MD5
b6d7be1470a3cbe7ace917302fe2567b
-
SHA1
590152e24e79aff0d870fb3c28ee0a6d7c3eb8de
-
SHA256
2ba19f428ca05b83e3bf78d052fedc68858265e6660578445f3ed0dd4beb4029
-
SHA512
bd8fa0dbab32741a5c604967e50f27dd40fc87ec531a375aa3d64e976f144f024d950e268ca1284bbf27366927931630a2d50b23db493d94d8ff05e3db59f86e
-
SSDEEP
98304:e/ifO/KEeeZU++RaDnnslXhPo3eLb4b5LKKYuyqFv+ROrhH/lGMa3wc1crbu:eafDEvd+RllXhPo3eLbMqkrTrQ1ob
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b6d7be1470a3cbe7ace917302fe2567b_JaffaCakes118
Files
-
b6d7be1470a3cbe7ace917302fe2567b_JaffaCakes118.exe windows:6 windows x86 arch:x86
4f5ef5d19f016466f3fde09929939f35
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetVersionExW
VirtualFree
InterlockedPopEntrySList
QueryDepthSList
UnregisterWaitEx
SignalObjectAndWait
LoadLibraryW
GetPrivateProfileStringA
FreeLibrary
GlobalFree
DeleteFileA
LoadLibraryA
GetCurrentDirectoryA
lstrlenA
MoveFileA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
WriteConsoleW
HeapSize
CreateTimerQueue
FindClose
FindNextFileA
FindFirstFileA
SetFileAttributesA
CreateEventA
DeleteCriticalSection
GetSystemInfo
SetEvent
Sleep
OpenProcess
WaitForSingleObject
InitializeCriticalSection
LeaveCriticalSection
SetThreadPriority
EnterCriticalSection
GetCurrentProcessId
ReadProcessMemory
CloseHandle
GetLastError
CreateToolhelp32Snapshot
Module32First
Module32Next
GetCurrentProcess
GetTickCount
GetCurrentDirectoryW
TryEnterCriticalSection
PeekConsoleInputA
ReadConsoleInputW
GetNumberOfConsoleInputEvents
SetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
ReadConsoleW
GetFileSizeEx
GetConsoleMode
GetTimeZoneInformation
UnlockFileEx
LockFileEx
HeapCompact
CreateProcessW
GetTempPathW
FlushFileBuffers
SetFilePointerEx
SetStdHandle
VirtualQuery
VirtualProtect
VirtualAlloc
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
ExitProcess
GetDriveTypeW
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
LoadLibraryExW
InterlockedFlushSList
InterlockedPushEntrySList
RaiseException
RtlUnwind
CreateThread
GetExitCodeThread
GetThreadTimes
FlushViewOfFile
GetStdHandle
ExpandEnvironmentStringsW
SetConsoleCtrlHandler
GetACP
QueryPerformanceFrequency
GetExitCodeProcess
GenerateConsoleCtrlEvent
GetProcessTimes
MoveFileW
GetSystemTime
GetFileType
CreateProcessA
SystemTimeToFileTime
SetEnvironmentVariableA
SetCurrentDirectoryW
DeleteFileW
GetFileAttributesExW
SetFileAttributesW
SetCurrentDirectoryA
GetVersion
DuplicateHandle
GetFileAttributesW
GetEnvironmentVariableA
CreatePipe
SetEnvironmentVariableW
SetFileTime
RemoveDirectoryW
FindNextFileW
GetFullPathNameW
GetFileAttributesExA
FindFirstFileW
CreateDirectoryW
SetErrorMode
LoadLibraryExA
SetEndOfFile
GetFullPathNameA
IsDBCSLeadByte
GetFileAttributesA
GetFileInformationByHandle
OutputDebugStringW
GetConsoleCP
GetConsoleOutputCP
GetModuleFileNameW
WaitNamedPipeW
PeekNamedPipe
GetCurrentThreadId
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
GetModuleHandleW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
CreateEventW
MultiByteToWideChar
GetProcessHeap
InitializeCriticalSectionAndSpinCount
SetLastError
DecodePointer
EncodePointer
LocalFree
GetStringTypeW
FormatMessageA
CreateFileW
IsProcessorFeaturePresent
HeapValidate
QueryPerformanceCounter
HeapAlloc
HeapFree
GlobalAlloc
CreateDirectoryA
RemoveDirectoryA
CreateFileA
GetFileSize
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
SetUnhandledExceptionFilter
GetCurrentThread
WinExec
OutputDebugStringA
ReadFile
SetFilePointer
WriteFile
GetSystemDirectoryA
GetVersionExA
GlobalUnlock
GlobalLock
lstrlenW
WideCharToMultiByte
CompareStringA
GetLocaleInfoA
ReleaseSemaphore
user32
GetMenu
AdjustWindowRectEx
OffsetRect
GetKeyboardLayoutNameA
ReleaseDC
InvalidateRect
SetRect
PeekMessageA
GetClientRect
ClientToScreen
GetMessageA
GetAsyncKeyState
FillRect
GetDC
GetCursorPos
RegisterClassA
PostQuitMessage
SystemParametersInfoA
FlashWindowEx
LoadIconA
ScreenToClient
SetWindowPos
GetKeyState
ShowCursor
GetKeyboardLayout
OpenClipboard
CloseClipboard
GetClipboardData
CharNextW
CharNextExA
CharPrevExA
CharPrevA
MessageBoxA
LoadStringA
MoveWindow
FindWindowA
SetCursor
DestroyCursor
LoadImageA
SetCursorPos
ReleaseCapture
SetCapture
ChangeDisplaySettingsA
GetCapture
ShowWindow
SetFocus
GetSystemMetrics
UpdateWindow
RegisterClassExA
UnregisterClassA
TranslateMessage
CreateWindowExA
DefWindowProcA
GetWindowLongA
SetWindowLongA
DestroyWindow
LoadCursorA
DispatchMessageA
IsWindow
gdi32
SelectObject
CreateCompatibleDC
GetStockObject
DeleteDC
EnumFontFamiliesExA
DeleteObject
CreateSolidBrush
CreateDIBSection
TextOutA
SetBkMode
TextOutW
SetTextColor
SetBkColor
GetTextExtentPoint32W
GetTextExtentPoint32A
CreateFontIndirectA
GetCharABCWidthsFloatW
StretchBlt
advapi32
RegCloseKey
RegEnumValueA
RegQueryInfoKeyA
RegLoadKeyA
RegSetValueExA
RegQueryValueA
RegFlushKey
RegCreateKeyExA
RegDeleteKeyA
RegSetValueA
RegCreateKeyA
RegConnectRegistryA
RegSaveKeyA
RegEnumKeyExA
CryptReleaseContext
RegCreateKeyExW
RegSetValueExW
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueA
ole32
OleSetContainedObject
OleUninitialize
CoGetClassObject
CoCreateInstance
CoInitialize
CoUninitialize
OleInitialize
CoInitializeEx
winmm
timeBeginPeriod
timeGetDevCaps
timeGetTime
timeEndPeriod
d3d8
Direct3DCreate8
devil
ilOriginFunc
ilShutDown
ilEnable
ilDeleteImages
ilInit
ilSave
ilSetPixels
ilTexImage
ilGenImages
ilConvertImage
ilGetInteger
ilCopyPixels
ilLoad
ilBindImage
imm32
ImmAssociateContext
ImmGetCompositionStringW
ImmSetCompositionStringW
ImmGetCandidateListW
ImmReleaseContext
ImmSetConversionStatus
ImmGetOpenStatus
ImmNotifyIME
ImmIsIME
ImmGetIMEFileNameA
ImmGetConversionStatus
ImmGetContext
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
imagehlp
StackWalk
GetTimestampForLoadedLibrary
EnumerateLoadedModules
mss32
_AIL_auto_update_3D_position@8
_AIL_enumerate_3D_providers@12
_AIL_3D_sample_volume@4
_AIL_mem_free_lock@4
_AIL_file_read@8
_AIL_set_file_callbacks@16
_AIL_WAV_info@8
_AIL_decompress_ASI@24
_AIL_decompress_ADPCM@12
_AIL_file_type@8
_AIL_open_digital_driver@16
_AIL_open_stream@12
_AIL_close_digital_driver@4
_AIL_open_3D_provider@4
_AIL_close_3D_provider@4
_AIL_open_3D_listener@4
_AIL_close_3D_listener@4
_AIL_set_3D_position@16
_AIL_set_3D_velocity@20
_AIL_set_3D_orientation@28
_AIL_startup@0
_AIL_shutdown@0
_AIL_set_redist_directory@4
_AIL_close_stream@4
_AIL_start_stream@4
_AIL_pause_stream@8
_AIL_3D_sample_status@4
_AIL_resume_3D_sample@4
_AIL_set_3D_sample_loop_count@8
_AIL_set_3D_sample_volume@8
_AIL_set_3D_sample_file@8
_AIL_set_stream_volume_levels@12
_AIL_stream_volume_levels@12
_AIL_set_stream_loop_count@8
_AIL_stream_status@4
_AIL_last_error@0
_AIL_allocate_sample_handle@4
_AIL_release_sample_handle@4
_AIL_init_sample@4
_AIL_set_sample_file@12
_AIL_start_sample@4
_AIL_stop_sample@4
_AIL_resume_sample@4
_AIL_end_sample@4
_AIL_set_sample_volume_pan@12
_AIL_set_sample_loop_count@8
_AIL_sample_status@4
_AIL_sample_volume_pan@12
_AIL_allocate_3D_sample_handle@4
_AIL_release_3D_sample_handle@4
_AIL_start_3D_sample@4
_AIL_stop_3D_sample@4
_AIL_end_3D_sample@4
speedtreert
?SetWindStrength@CSpeedTreeRT@@QAEMMMM@Z
?SetNumWindMatrices@CSpeedTreeRT@@SAXI@Z
?SetLightState@CSpeedTreeRT@@SAXI_N@Z
?SetLightAttributes@CSpeedTreeRT@@SAXIPBM@Z
?SetCamera@CSpeedTreeRT@@SAXPBM0@Z
??0SGeometry@CSpeedTreeRT@@QAE@XZ
?GetCollisionObject@CSpeedTreeRT@@QAEXIAAW4ECollisionObjectType@1@PAM1@Z
?GetCollisionObjectCount@CSpeedTreeRT@@QAEIXZ
?GetBoundingBox@CSpeedTreeRT@@QBEXPAM@Z
?GetCurrentError@CSpeedTreeRT@@SAPBDXZ
?SetTextureFlip@CSpeedTreeRT@@SAX_N@Z
?GetTextures@CSpeedTreeRT@@QBEXAAUSTextures@1@@Z
?GetGeometry@CSpeedTreeRT@@QAEXAAUSGeometry@1@KFFF@Z
?GetNumFrondLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumLeafLodLevels@CSpeedTreeRT@@QBEGXZ
?GetNumBranchLodLevels@CSpeedTreeRT@@QBEGXZ
?SetLodLimits@CSpeedTreeRT@@QAEXMM@Z
?SetDropToBillboard@CSpeedTreeRT@@SAX_N@Z
?SetLodLevel@CSpeedTreeRT@@QAEXM@Z
?ComputeLodLevel@CSpeedTreeRT@@QAEXXZ
?SetLocalMatrices@CSpeedTreeRT@@QAEXII@Z
?SetFrondWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetBranchWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetLeafWindMethod@CSpeedTreeRT@@QAEXW4EWindMethod@1@@Z
?SetNumLeafRockingGroups@CSpeedTreeRT@@QAEXI@Z
?SetLeafRockingState@CSpeedTreeRT@@QAEX_N@Z
?GetFrondMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetLeafMaterial@CSpeedTreeRT@@QBEPBMXZ
?GetBranchMaterial@CSpeedTreeRT@@QBEPBMXZ
?SetFrondLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetLeafLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetBranchLightingMethod@CSpeedTreeRT@@QAEXW4ELightingMethod@1@@Z
?SetTreePosition@CSpeedTreeRT@@QAEXMMM@Z
?GetTreePosition@CSpeedTreeRT@@QBEPBMXZ
?SetTreeSize@CSpeedTreeRT@@QAEXMM@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBEI@Z
?LoadTree@CSpeedTreeRT@@QAE_NPBD@Z
?MakeInstance@CSpeedTreeRT@@QAEPAV1@XZ
?Compute@CSpeedTreeRT@@QAE_NPBMI_N@Z
??3CSpeedTreeRT@@SAXPAX@Z
??2CSpeedTreeRT@@SAPAXI@Z
??1CSpeedTreeRT@@QAE@XZ
??0CSpeedTreeRT@@QAE@XZ
??1STextures@CSpeedTreeRT@@QAE@XZ
??0STextures@CSpeedTreeRT@@QAE@XZ
??1SGeometry@CSpeedTreeRT@@QAE@XZ
?SetTime@CSpeedTreeRT@@SAXM@Z
dinput8
DirectInput8Create
ws2_32
__WSAFDIsSet
closesocket
connect
ioctlsocket
recv
send
socket
WSAGetLastError
WSAStartup
WSACleanup
htons
inet_addr
gethostbyname
select
ddraw
DirectDrawCreate
shell32
ShellExecuteW
ShellExecuteA
SHGetSpecialFolderPathA
oleaut32
SysFreeString
VariantClear
VariantInit
SysAllocString
Sections
.text Size: 3.6MB - Virtual size: 3.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 478KB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BINKCONS Size: 512B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 200KB - Virtual size: 200KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ