Static task
static1
Behavioral task
behavioral1
Sample
b90a64f28722aed021abc9691551cc39_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
b90a64f28722aed021abc9691551cc39_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b90a64f28722aed021abc9691551cc39_JaffaCakes118
-
Size
788KB
-
MD5
b90a64f28722aed021abc9691551cc39
-
SHA1
1fa7b4004a0e997640637211bc01778bb26fd18f
-
SHA256
c21e2769b2a17ef048f3f1fdc5dc0d46706c1f2a962f2366a993255a99802ed3
-
SHA512
ebf41a2dc4a5358f84b46f5882704eb964e49f6c5b5ad88ec6589f68531de57cd23a5896d6327a99d96142d07cc1f9be8bd7231f2a0f699f2880b5c2843020b9
-
SSDEEP
12288:iln1fHrkqTF6XoTPZ+fylG4OziCCK3Sk3CmGeX+S7+vmhs0TA:e1fHHY2PZ+fylG4ASkSmJXS+A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b90a64f28722aed021abc9691551cc39_JaffaCakes118
Files
-
b90a64f28722aed021abc9691551cc39_JaffaCakes118.exe windows:4 windows x86 arch:x86
2683c97f2ee14a1d94680a8cd05337a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mcengine
Quarantine_Create
Quarantine
QuarantinePow
Repair
AdFailedRepair
Quarantine_Close
GetRestartAVmon
Scan
GetScanCurrentCount
AdRepair
GetScanCurrentPos
Engine2
Init2
SetKeepDay
GetQuarantineKeepDay
Quarantine_RestoreInit
GetRestoreCount
Quarantine_Restore
QuarantineView
ClearCookie
Release
ClearIECache
ClearSiteVisitedLog
ClearAutoForm
ClearHistory
ClearRecycleBin
ClearWinTemp
ClearTemp
ClearRecent
ClearMediaPlayLog
ClearRunList
ClearSearchInternet
ClearSearchPictureAndMusicAndVideo
ClearSearchComputerAndPeople
ClearSearchFileFolder
PowerScan
kernel32
GlobalDeleteAtom
SetThreadPriority
InterlockedIncrement
InterlockedDecrement
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FreeLibrary
LoadLibraryA
SetLastError
LocalFree
FormatMessageA
DuplicateHandle
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFullPathNameA
GetThreadLocale
GetFileTime
FileTimeToLocalFileTime
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
SetErrorMode
RtlUnwind
SetEnvironmentVariableA
GetDriveTypeA
lstrcmpA
ExitThread
RaiseException
HeapFree
HeapAlloc
GetStartupInfoA
GetTimeZoneInformation
GetSystemTime
GetACP
SetStdHandle
GetFileType
HeapReAlloc
HeapSize
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadCodePtr
CompareStringA
CompareStringW
GetCurrentThread
GetProfileStringA
InterlockedExchange
GetCurrentThreadId
GetTickCount
UnmapViewOfFile
FileTimeToSystemTime
WriteFile
SetFileTime
GetFileAttributesA
LocalFileTimeToFileTime
GetCurrentDirectoryA
SystemTimeToFileTime
SetFilePointer
lstrcatA
lstrlenW
lstrlenA
GetPrivateProfileStringA
lstrcpynA
IsBadReadPtr
IsBadWritePtr
GetVersion
LeaveCriticalSection
GetLocaleInfoA
SetFileAttributesA
RemoveDirectoryA
GetTempPathA
GlobalReAlloc
lstrcpyA
ReleaseSemaphore
CreateSemaphoreA
GetCurrentProcess
GetLocalTime
EnterCriticalSection
DeleteCriticalSection
WideCharToMultiByte
DeleteFileA
FindNextFileA
SetEvent
ResetEvent
FindResourceA
LoadResource
SizeofResource
LockResource
GlobalAlloc
GlobalLock
GlobalUnlock
MulDiv
GlobalFree
CreateEventA
GetVolumeInformationA
GetCommandLineA
InitializeCriticalSection
ResumeThread
Sleep
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
CreateFileA
GetFileSize
ReadFile
MultiByteToWideChar
CreateDirectoryA
GetWindowsDirectoryA
FindFirstFileA
FindClose
GetPrivateProfileIntA
WritePrivateProfileStringA
GetModuleFileNameA
CreateProcessA
WinExec
SuspendThread
CreateToolhelp32Snapshot
Process32First
Process32Next
OpenProcess
GetExitCodeProcess
TerminateProcess
WaitForSingleObject
CloseHandle
GetVersionExA
lstrcmpiA
CreateMutexA
GetLastError
ExitProcess
CreateThread
user32
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
IntersectRect
GetWindowPlacement
MapDialogRect
SetWindowPos
GetWindow
SetWindowContextHelpId
EndDialog
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
EnableMenuItem
GetNextDlgTabItem
GetMessageA
GetActiveWindow
CallNextHookEx
ValidateRect
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
PostQuitMessage
LoadBitmapA
GetDesktopWindow
ReleaseCapture
SetCapture
GrayStringA
DrawTextA
TabbedTextOutA
GetFocus
PtInRect
DrawFrameControl
DrawFocusRect
GetKeyState
UpdateWindow
RedrawWindow
SetActiveWindow
SystemParametersInfoA
GetClassNameA
ModifyMenuA
GetMenuItemCount
GetMenuItemID
GetMenu
IsWindow
RegisterWindowMessageA
OffsetRect
SetParent
ClientToScreen
GetParent
TrackPopupMenu
wsprintfA
DestroyMenu
ExitWindowsEx
InflateRect
FrameRect
CopyRect
GetSysColor
FillRect
EnableWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
LoadIconA
GetDC
ReleaseDC
SetRect
GetWindowLongA
SetWindowLongA
SetWindowRgn
GetForegroundWindow
MessageBoxA
RemoveMenu
InsertMenuA
SetForegroundWindow
IsWindowVisible
GetSubMenu
GetMenuStringA
CheckMenuItem
KillTimer
GetWindowRect
PostMessageA
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
IsChild
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
PostThreadMessageA
RegisterClipboardFormatA
GetCursorPos
ScreenToClient
LoadCursorA
SetCursor
FindWindowA
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
InvalidateRect
SendMessageA
LoadMenuA
SetTimer
PeekMessageA
TranslateMessage
DispatchMessageA
LoadImageA
MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
LoadStringA
GetSysColorBrush
WindowFromPoint
CharUpperA
EndPaint
BeginPaint
GetWindowDC
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
MapWindowPoints
SetFocus
AdjustWindowRectEx
IsRectEmpty
ScrollWindow
GetScrollInfo
SetScrollInfo
SetMenuDefaultItem
ShowScrollBar
GetClassLongA
gdi32
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
RestoreDC
GetViewportExtEx
GetWindowExtEx
LPtoDP
DPtoLP
PatBlt
GetMapMode
GetTextColor
GetBkColor
SaveDC
SetBkColor
SetTextColor
GetClipBox
Escape
TextOutA
RectVisible
PtVisible
Rectangle
ExtTextOutA
CreateFontIndirectA
GetStockObject
GetTextExtentPoint32A
CreatePen
RoundRect
CreateFontA
CreateBitmap
StretchBlt
CreateDIBSection
GetObjectA
CreateSolidBrush
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteDC
DeleteObject
GetDeviceCaps
CreateDIBitmap
GetTextExtentPointA
CreateRoundRectRgn
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
RegCreateKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegDeleteValueA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
shell32
SHGetSpecialFolderPathA
SHGetFileInfoA
SHGetPathFromIDListA
SHGetMalloc
SHGetDesktopFolder
ShellExecuteA
Shell_NotifyIconA
comctl32
_TrackMouseEvent
FlatSB_EnableScrollBar
InitializeFlatSB
ImageList_GetIconSize
ImageList_Draw
ImageList_DrawEx
ord17
ImageList_Destroy
ImageList_LoadImageA
oledlg
ord8
ole32
CoTaskMemAlloc
CoTaskMemFree
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
CoUninitialize
CoInitializeEx
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CLSIDFromProgID
olepro32
ord251
ord253
oleaut32
SafeArrayGetUBound
SafeArrayUnaccessData
SysAllocStringLen
VariantClear
SysAllocString
SysFreeString
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantCopy
SysAllocStringByteLen
VariantChangeType
VariantTimeToSystemTime
SysStringLen
SafeArrayAccessData
shlwapi
PathFileExistsA
wininet
HttpSendRequestA
InternetCloseHandle
InternetGetConnectedState
InternetReadFile
InternetConnectA
HttpOpenRequestA
InternetOpenA
Sections
.text Size: 584KB - Virtual size: 580KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 124KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ