Static task
static1
Behavioral task
behavioral1
Sample
baf4f7ae6951ad71f12e478d6becbbef_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
baf4f7ae6951ad71f12e478d6becbbef_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
baf4f7ae6951ad71f12e478d6becbbef_JaffaCakes118
-
Size
1.9MB
-
MD5
baf4f7ae6951ad71f12e478d6becbbef
-
SHA1
5ac49bcbaef35ccf78e913d3f0651d1eb746a966
-
SHA256
52caa92241b2e093b7dd46de333035d36348aae5499166738b74fd6477c4bff4
-
SHA512
962dc8142ced7e9d80ad569c4ebf8d7c328788b57643917e83f911e664eec7b67680f594aa0fe6354ec7416da2c3a4687fe7518e368055b2aa370e0ecace716f
-
SSDEEP
24576:ow/BBBjXKT1DaIFZAH9MVYWkENLbvlT/w000000MdSKrIWK9exHT9UQ:dBXjXKT1Ddz9T/w000000M3rTT7
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource baf4f7ae6951ad71f12e478d6becbbef_JaffaCakes118
Files
-
baf4f7ae6951ad71f12e478d6becbbef_JaffaCakes118.exe windows:4 windows x86 arch:x86
e9437f0f8963e530c91d34a423a5846f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileTime
FindNextFileW
SetErrorMode
GetVersionExW
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
RaiseException
ExitThread
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GlobalFlags
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
LocalAlloc
EnumResourceTypesW
EnumResourceNamesW
LocalSize
LoadLibraryExW
LoadLibraryExA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetModuleHandleA
GetCurrentProcessId
SuspendThread
WritePrivateProfileStringW
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedDecrement
FormatMessageW
LocalFree
MulDiv
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
FreeLibrary
CompareStringW
GetVersionExA
GlobalFree
SetEvent
GetTickCount
ResumeThread
SetThreadPriority
CreateEventW
ReadFile
SetFilePointer
GetFileSize
GetModuleFileNameW
IsBadStringPtrA
CreateThread
TerminateThread
GetLocalTime
FindClose
InterlockedExchange
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetSystemDirectoryA
GetWindowsDirectoryA
DeleteFileA
WinExec
GetTempPathA
MoveFileW
Sleep
LoadLibraryA
GetSystemDirectoryW
GetFileAttributesW
TerminateProcess
OpenProcess
lstrcmpW
lstrcpyW
FreeResource
lstrcatW
GetTempPathW
CreateFileW
DeleteFileW
GlobalUnlock
GlobalLock
GlobalAlloc
FindResourceW
ExitProcess
CopyFileA
lstrcpyA
CreateDirectoryA
CloseHandle
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
lstrcmpA
lstrcatA
GetModuleFileNameA
WaitForSingleObject
CreateMutexW
GetVolumeInformationA
GetDriveTypeA
MultiByteToWideChar
lstrlenA
FindNextFileA
FindFirstFileA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetLogicalDrives
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetLastError
SetLastError
WideCharToMultiByte
VirtualFree
lstrlenW
user32
CopyAcceleratorTableW
CharNextW
ReleaseCapture
SetCapture
UnregisterClassW
GetSysColorBrush
CharUpperW
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
GetWindowThreadProcessId
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
SystemParametersInfoW
DestroyMenu
InflateRect
ReleaseDC
GetDC
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
IsRectEmpty
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
SendDlgItemMessageW
SendMessageW
EnableWindow
LoadIconW
CreatePopupMenu
AppendMenuW
GetWindowRect
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
SetRectEmpty
LoadMenuW
RegisterClipboardFormatW
GetSystemMenu
GetTopWindow
UnhookWindowsHookEx
SetRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
DestroyIcon
RegisterWindowMessageW
GetClientRect
SetFocus
IsIconic
GetSystemMetrics
DrawIcon
GetDesktopWindow
IsWindowEnabled
GetActiveWindow
SetActiveWindow
SetParent
wsprintfW
GetSysColor
UpdateWindow
PostThreadMessageW
SetForegroundWindow
GetParent
InvalidateRect
LoadCursorW
SetCursor
CopyRect
GetFocus
UnregisterClassA
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
CreateIconIndirect
CopyIcon
GetDoubleClickTime
SetClassLongW
SetWindowRgn
LoadStringW
DrawStateW
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
TrackPopupMenu
GetKeyState
SetScrollPos
GetScrollPos
IsWindowVisible
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
ScreenToClient
EqualRect
GetScrollInfo
SetScrollInfo
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
DrawIconEx
SendMessageTimeoutW
DrawFrameControl
DrawEdge
RegisterClassA
DefMDIChildProcW
DefMDIChildProcA
DefDlgProcW
DefDlgProcA
DefFrameProcW
SetTimer
KillTimer
DefFrameProcA
DefWindowProcA
CallWindowProcA
EnableScrollBar
EnumWindows
IsWindowUnicode
GetWindowLongA
SetWindowLongA
GetIconInfo
DrawAnimatedRects
FindWindowW
EnumChildWindows
SetMenuDefaultItem
LoadImageW
RedrawWindow
DrawFocusRect
IsWindow
PostMessageW
EndDialog
GetNextDlgTabItem
GetDlgItem
GetWindowLongW
DestroyWindow
CreateDialogIndirectParamW
gdi32
CreateSolidBrush
CombineRgn
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
CreateCompatibleBitmap
StretchDIBits
CreatePen
GetObjectType
SelectPalette
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
DeleteObject
ExcludeClipRect
SetMapMode
SetStretchBltMode
SetBkMode
RestoreDC
SaveDC
ExtTextOutW
BitBlt
CreateCompatibleDC
GetDeviceCaps
PatBlt
CreateRectRgnIndirect
CreateBitmap
SetBkColor
GetObjectW
GetStockObject
GetCurrentObject
OffsetRgn
GetTextCharsetInfo
StretchBlt
CreateDIBSection
SetBrushOrgEx
CreatePalette
CreateDIBitmap
Polygon
GetDIBits
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutW
RectVisible
PtVisible
SetTextColor
CreateFontIndirectW
GetTextExtentPoint32W
CreateFontW
GetClipBox
GetPixel
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
advapi32
RegQueryValueW
RegEnumValueA
RegCloseKey
RegOpenKeyExW
RegDeleteValueW
RegQueryValueExA
RegSetValueExW
RegQueryValueExW
RegCreateKeyW
RegSetValueExA
RegOpenKeyW
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyA
RegEnumKeyW
shell32
Shell_NotifyIconW
SHAppBarMessage
SHGetSpecialFolderPathW
ShellExecuteW
SHGetSpecialFolderPathA
ShellExecuteA
comctl32
InitCommonControlsEx
_TrackMouseEvent
FlatSB_GetScrollProp
ImageList_GetBkColor
ImageList_GetImageInfo
ImageList_DrawIndirect
ImageList_GetIconSize
ImageList_Destroy
shlwapi
PathStripToRootW
UrlUnescapeW
PathFindFileNameW
PathFindExtensionW
PathIsUNCW
oledlg
OleUIBusyW
ole32
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoDisconnectObject
CLSIDFromProgID
CoTaskMemAlloc
CoTaskMemFree
CreateStreamOnHGlobal
CoInitialize
CoCreateInstance
CoRegisterMessageFilter
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CLSIDFromString
oleaut32
SystemTimeToVariantTime
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysFreeString
SysStringLen
SysAllocStringByteLen
SysStringByteLen
OleCreateFontIndirect
SafeArrayDestroy
SysAllocString
VariantCopy
LoadTypeLi
VariantTimeToSystemTime
gdiplus
GdiplusShutdown
GdipCreateBitmapFromStream
GdipAlloc
GdipFree
GdipCreateHBITMAPFromBitmap
GdipDisposeImage
GdiplusStartup
GdipCloneImage
psapi
GetModuleFileNameExA
GetModuleFileNameExW
EnumProcessModules
EnumProcesses
wininet
InternetGetLastResponseInfoW
InternetSetStatusCallbackW
InternetSetFilePointer
InternetWriteFile
InternetReadFile
InternetOpenUrlW
InternetGetConnectedState
HttpQueryInfoW
InternetQueryDataAvailable
InternetQueryOptionW
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetCloseHandle
InternetOpenW
imagehlp
ImageDirectoryEntryToData
Sections
.text Size: 574KB - Virtual size: 573KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 280KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ