Static task
static1
Behavioral task
behavioral1
Sample
be3aa16c934747524df806d081a89864_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
be3aa16c934747524df806d081a89864_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
be3aa16c934747524df806d081a89864_JaffaCakes118
-
Size
1.3MB
-
MD5
be3aa16c934747524df806d081a89864
-
SHA1
51fb4edecaed3e93d8a807b5aa081868f978e326
-
SHA256
acf8f08476e2c50917e3740c5eab6946e3f34f283e06635100f4a1f91e96788d
-
SHA512
11c05dcdd5e64a525b039c4817402236167e0ba8c91057bc8ee306b7480a8653b20724d0b0635ad1d695173015822f8115be2db9662d6ecb5f804b347d14a33a
-
SSDEEP
24576:DZFeHgmVr6DAXJX0cJC58YBqBlmYjGNPH71WbhWWfUFf:f8pVr6kKFBSm3NPJT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource be3aa16c934747524df806d081a89864_JaffaCakes118
Files
-
be3aa16c934747524df806d081a89864_JaffaCakes118.exe windows:4 windows x86 arch:x86
0f23611f9022d0fe3223b1614467fe23
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetFileAttributesW
GetFileTime
FindNextFileW
SetErrorMode
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
RaiseException
ExitThread
HeapReAlloc
SetStdHandle
GetFileType
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GlobalReAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA
TlsGetValue
GlobalFlags
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentProcessId
SuspendThread
WritePrivateProfileStringW
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedDecrement
FormatMessageW
LocalFree
MulDiv
GetModuleHandleA
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
FreeLibrary
CompareStringW
LoadLibraryA
GetVersionExA
GlobalFree
SetEvent
GetTickCount
ResumeThread
SetThreadPriority
CreateEventW
ReadFile
SetFilePointer
GetFileSize
GetModuleFileNameA
GetModuleFileNameW
lstrcpyA
CreateFileA
CreateThread
lstrcatA
TerminateThread
Sleep
FindClose
InterlockedExchange
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
OpenProcess
lstrcmpW
GetLocalTime
lstrcpyW
FreeResource
CloseHandle
WriteFile
CreateFileW
DeleteFileW
GlobalUnlock
GlobalLock
GlobalAlloc
SizeofResource
LockResource
LoadResource
FindResourceW
ExitProcess
WaitForSingleObject
CreateMutexW
GetVolumeInformationA
GetDriveTypeA
MultiByteToWideChar
lstrlenA
FindNextFileA
FindFirstFileA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetLogicalDrives
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetLastError
SetLastError
WideCharToMultiByte
GetStdHandle
lstrlenW
user32
SetParent
SetTimer
KillTimer
DestroyIcon
MessageBeep
GetNextDlgGroupItem
InvalidateRgn
SetRect
IsRectEmpty
CopyAcceleratorTableW
CharNextW
ReleaseCapture
SetCapture
UnregisterClassW
GetSysColorBrush
CharUpperW
GetWindowThreadProcessId
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
SystemParametersInfoW
DestroyMenu
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
RegisterClipboardFormatW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
SendMessageW
UnregisterClassA
DrawAnimatedRects
FindWindowW
EnumChildWindows
TrackPopupMenu
GetKeyState
IsWindowVisible
GetMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
ScreenToClient
EqualRect
PtInRect
LoadMenuW
SetMenuDefaultItem
LoadImageW
RedrawWindow
EnableWindow
LoadIconW
CreatePopupMenu
AppendMenuW
GetWindowRect
RegisterWindowMessageW
GetClientRect
SetFocus
IsIconic
GetSystemMetrics
DrawIcon
GetDesktopWindow
IsWindowEnabled
GetActiveWindow
SetActiveWindow
wsprintfW
GetSysColor
UpdateWindow
PostThreadMessageW
SetForegroundWindow
GetParent
InvalidateRect
LoadCursorW
SetCursor
CopyRect
GetFocus
IsWindow
PostMessageW
EndDialog
GetNextDlgTabItem
GetDlgItem
GetWindowLongW
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
CreateDialogIndirectParamW
DestroyWindow
gdi32
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetRgnBox
GetDeviceCaps
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
SetWindowExtEx
GetTextColor
GetObjectW
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
DeleteObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
BitBlt
CreateCompatibleDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetStockObject
CreateFontIndirectW
GetCurrentObject
CreateFontW
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
advapi32
RegSetValueExA
RegEnumValueA
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyW
RegOpenKeyA
RegCreateKeyW
RegDeleteValueW
RegQueryValueExW
RegSetValueExW
RegQueryValueExA
RegOpenKeyExW
RegCloseKey
shell32
ShellExecuteW
SHAppBarMessage
Shell_NotifyIconW
ShellExecuteA
comctl32
InitCommonControlsEx
_TrackMouseEvent
shlwapi
PathStripToRootW
PathIsUNCW
UrlUnescapeW
PathFindFileNameW
PathFindExtensionW
oledlg
OleUIBusyW
ole32
CoTaskMemAlloc
CLSIDFromProgID
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CreateStreamOnHGlobal
CLSIDFromString
CoTaskMemFree
oleaut32
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysFreeString
SysStringLen
OleCreateFontIndirect
SafeArrayDestroy
SysAllocString
VariantCopy
gdiplus
GdiplusStartup
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStream
GdiplusShutdown
GdipCloneImage
GdipDisposeImage
GdipAlloc
GdipFree
psapi
EnumProcessModules
EnumProcesses
GetModuleFileNameExW
wininet
InternetOpenUrlW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
HttpQueryInfoW
InternetQueryDataAvailable
InternetQueryOptionW
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetCloseHandle
InternetOpenW
InternetGetConnectedState
Sections
.text Size: 306KB - Virtual size: 305KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 196KB - Virtual size: 195KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 794KB - Virtual size: 794KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ