Static task
static1
Behavioral task
behavioral1
Sample
d14c9bb132aa869a9b209b49c997c849_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d14c9bb132aa869a9b209b49c997c849_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d14c9bb132aa869a9b209b49c997c849_JaffaCakes118
-
Size
533KB
-
MD5
d14c9bb132aa869a9b209b49c997c849
-
SHA1
648f423b0ad961d50310239be714b831a2a76cd9
-
SHA256
9088f9c62f87bb25f421059bae5d955aedca8b7f3ee047cc8014be7fbbd0ed41
-
SHA512
7a7a6c880e5c05369458d262b6b3fea70dc58e792f5ef9d55afe16afab0d9581ae0a94e4e9ea13d0eb11a2c97a463f0f1f30a6475a042f380ca49550ccb6b001
-
SSDEEP
12288:elMMnMMMMMUCMvSpSpRYe22CLwLJHaxdxBouqbGD6MlgEjD:wMMnMMMMMlMvSIpRYedC0L145sA6MbP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d14c9bb132aa869a9b209b49c997c849_JaffaCakes118
Files
-
d14c9bb132aa869a9b209b49c997c849_JaffaCakes118.exe windows:4 windows x86 arch:x86
5122869cb250c382b1765424acec6a5b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
uxtheme
CloseThemeData
GetThemeMargins
GetThemeAppProperties
GetThemePartSize
GetThemeColor
OpenThemeData
IsAppThemed
DrawThemeBackground
IsThemeActive
GetThemeBackgroundContentRect
GetThemeBackgroundExtent
GetThemeFont
DrawThemeParentBackground
SetWindowTheme
GetThemeMetric
ddraw
DirectDrawCreate
user32
EqualRect
EnumWindows
GetMenuDefaultItem
DrawFocusRect
EndDeferWindowPos
MsgWaitForMultipleObjectsEx
IsRectEmpty
PostThreadMessageA
DdeInitializeW
GetSysColor
GetClassLongW
GetComboBoxInfo
UnregisterClassW
GetAncestor
DispatchMessageA
WaitForInputIdle
GetDlgItem
CharUpperW
DialogBoxIndirectParamW
SetWindowPos
SetFocus
GetWindowRgnBox
CopyRect
OffsetRect
MessageBoxExW
GetMenuStringW
GetPropA
GetWindowLongW
GetKeyboardLayout
GetKeyNameTextW
CreateMenu
SetActiveWindow
PeekMessageW
AllowSetForegroundWindow
BeginPaint
GetWindowTextLengthW
GetLastInputInfo
ReleaseCapture
SetRectEmpty
IsChild
IntersectRect
GetNextDlgTabItem
LoadCursorA
DialogBoxIndirectParamA
LoadStringA
ClientToScreen
PeekMessageA
MapVirtualKeyW
GetWindowLongA
FindWindowW
FindWindowExW
LoadMenuW
CheckDlgButton
AttachThreadInput
MessageBeep
PostMessageW
CheckMenuRadioItem
SetCursor
GetCursor
GetMonitorInfoW
DestroyIcon
DdeGetData
GetDoubleClickTime
ReleaseDC
TrackMouseEvent
SetWindowRgn
EnableMenuItem
SystemParametersInfoW
SetTimer
SetClipboardData
CallNextHookEx
SetDlgItemTextW
DdeClientTransaction
SendNotifyMessageW
DeleteMenu
GetActiveWindow
GetMenuState
SetWindowLongA
MonitorFromPoint
SetWindowLongW
GetClientRect
GetMessageTime
MonitorFromWindow
UpdateLayeredWindow
TranslateAcceleratorW
IsWindowVisible
KillTimer
GetMenuItemCount
PostThreadMessageW
SetClipboardViewer
EndMenu
LockSetForegroundWindow
DdeDisconnect
MapDialogRect
MessageBoxIndirectW
CheckRadioButton
VkKeyScanExW
EnumChildWindows
MsgWaitForMultipleObjects
GetMessageA
DdeCreateStringHandleW
WinHelpW
GetSystemMetrics
GetMenuItemInfoW
CloseClipboard
wsprintfW
ShowWindow
SetScrollPos
MapWindowPoints
SetMenuItemInfoW
IsCharAlphaNumericW
EnableWindow
CheckMenuItem
DrawTextExW
DdeNameService
IsWindowEnabled
SendMessageTimeoutA
FillRect
EnumDisplaySettingsW
TrackPopupMenuEx
IsHungAppWindow
ShowOwnedPopups
EndDialog
GetWindowInfo
ChildWindowFromPoint
PostMessageA
DefWindowProcW
GetLastActivePopup
SetWindowTextW
ScreenToClient
UpdateWindow
UnhookWindowsHookEx
MessageBoxW
SetCursorPos
CharLowerW
SendDlgItemMessageW
EndPaint
SetWindowsHookExW
RemovePropA
GetClassNameW
GetIconInfo
UnionRect
InsertMenuW
SetScrollInfo
GetClipboardFormatNameW
CharNextA
GetProcessWindowStation
GetClassInfoExW
SetRect
CreateWindowExW
DestroyWindow
GetWindowPlacement
RegisterWindowMessageW
LoadImageW
GetClassInfoW
DialogBoxParamW
CopyImage
SetCapture
NotifyWinEvent
SetPropA
WindowFromPoint
GetTopWindow
RedrawWindow
GetMenuItemID
WaitMessage
DdeFreeStringHandle
GetClassWord
GetDialogBaseUnits
DialogBoxParamA
CopyIcon
GetDesktopWindow
FindWindowA
ShowCaret
RegisterClassExW
LoadCursorW
PostQuitMessage
GetWindow
IsWindowUnicode
GetForegroundWindow
DrawFrameControl
DdeFreeDataHandle
PtInRect
GetSystemMenu
LoadIconW
AdjustWindowRectEx
CallWindowProcW
IsDialogMessageW
CharPrevA
SetWindowPlacement
InvalidateRect
GetFocus
GetWindowRect
InsertMenuItemW
InflateRect
EmptyClipboard
SetPropW
CreateDialogParamW
GetShellWindow
GetDlgItemTextW
CharNextW
CallMsgFilterW
DispatchMessageW
SendMessageTimeoutW
SendMessageW
RemoveMenu
IsWindow
GetKeyState
AnimateWindow
LoadBitmapW
GetWindowTextW
SetForegroundWindow
GetCapture
GetMessageW
GetWindowThreadProcessId
GetMenuItemInfoA
SetMenu
GetSysColorBrush
ChangeClipboardChain
DrawIconEx
HideCaret
MessageBoxIndirectA
AppendMenuW
DestroyAcceleratorTable
GetDC
TrackPopupMenu
EnumThreadWindows
OpenClipboard
GetSubMenu
DeferWindowPos
LoadAcceleratorsW
GetPropW
GetAsyncKeyState
AdjustWindowRect
RegisterClipboardFormatW
LoadStringW
CreateIconIndirect
GetMessagePos
CreatePopupMenu
GetParent
SetDlgItemInt
MonitorFromRect
GetCursorPos
GetDlgCtrlID
RegisterWindowMessageA
MoveWindow
BeginDeferWindowPos
SendMessageA
DdeConnect
DrawTextW
DdeCreateDataHandle
IsIconic
SetParent
SystemParametersInfoA
DdeQueryStringW
IsDlgButtonChecked
GetWindowDC
SetMenuDefaultItem
MessageBoxExA
SetMenuItemBitmaps
IsMenu
DrawEdge
DefWindowProcA
DestroyMenu
RegisterClassW
RegisterClipboardFormatA
CharPrevW
CharLowerBuffW
DdeUninitialize
EnumDesktopWindows
GetClipboardData
GetScrollInfo
TranslateMessage
RemovePropW
ShowScrollBar
gdi32
TextOutA
Rectangle
CreateCompatibleBitmap
OffsetWindowOrgEx
CreateRectRgnIndirect
LineTo
SetTextColor
RestoreDC
PatBlt
SetViewportOrgEx
GetPaletteEntries
ExtTextOutW
SetMapMode
StretchBlt
GetTextMetricsW
SetRectRgn
SaveDC
LPtoDP
CreatePen
GetTextExtentPoint32A
GetClipBox
SetStretchBltMode
SetBkColor
TextOutW
SetDCPenColor
SelectObject
GetTextAlign
MoveToEx
SetBkMode
GetBrushOrgEx
CreateCompatibleDC
IntersectClipRect
CreateEnhMetaFileA
GetLayout
GetTextCharset
GetSystemPaletteEntries
SetTextAlign
CreateMetaFileW
SetViewportExtEx
SetWindowOrgEx
RealizePalette
GetRgnBox
CreateDCA
DeleteObject
SetPaletteEntries
CreateBitmap
CloseEnhMetaFile
CreatePalette
GetGlyphIndicesW
GetDeviceCaps
SetWindowExtEx
GetTextExtentPoint32W
CreateDIBPatternBrushPt
GetTextExtentPointW
OffsetRgn
GetDCOrgEx
GetRegionData
SelectPalette
GetStockObject
DeleteEnhMetaFile
StretchDIBits
CreatePolygonRgn
RectVisible
CreateFontW
SetLayout
GetObjectW
GetBkColor
GetObjectA
CreateSolidBrush
GetBkMode
CreateRectRgn
GetPixel
CreateDIBSection
GetDIBits
PlayEnhMetaFile
CreatePatternBrush
DeleteDC
SetBrushOrgEx
ExtCreateRegion
CreateDCW
CreateFontIndirectA
CloseMetaFile
CombineRgn
BitBlt
GetTextExtentExPointI
GetTextColor
CreateFontIndirectW
CreateHalftonePalette
EqualRgn
psapi
GetProcessImageFileNameW
advapi32
GetTraceLoggerHandle
RegDeleteValueA
RegOpenKeyW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetLengthSid
RegCloseKey
RegEnumValueA
CryptCreateHash
CryptGetHashParam
RegQueryValueExW
RegEnumKeyExW
RegEnumKeyW
GetTraceEnableFlags
RegDeleteValueW
RegSetValueExW
CryptHashData
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExA
RegCreateKeyExA
CryptAcquireContextW
SetTokenInformation
RegisterTraceGuidsW
RegDeleteKeyW
GetTraceEnableLevel
DuplicateTokenEx
RegDeleteKeyA
CryptReleaseContext
IsTextUnicode
ConvertSidToStringSidW
RegOpenCurrentUser
CryptDestroyHash
ImpersonateSelf
CreateProcessAsUserW
RegOpenKeyExW
TraceMessage
RegQueryValueW
UnregisterTraceGuids
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyA
GetTokenInformation
RegCreateKeyExW
ConvertStringSidToSidW
OpenProcessToken
OpenThreadToken
GetUserNameW
TraceEvent
SetThreadToken
shell32
SHGetDataFromIDListW
SHAppBarMessage
ShellExecuteW
ShellExecuteExW
ExtractIconW
SHFileOperationW
ExtractAssociatedIconExW
SHChangeNotify
Shell_NotifyIconW
ShellAboutW
SHGetFolderPathW
SHSetLocalizedName
Shell_NotifyIconA
SHGetDesktopFolder
ShellExecuteA
SHCreateShellItem
SHGetFileInfoW
SHGetPathFromIDListW
SHPathPrepareForWriteW
SHGetInstanceExplorer
SHGetSpecialFolderLocation
DragQueryFileW
SHGetFolderPathAndSubDirW
SHGetFolderLocation
ExtractIconExW
SHGetSpecialFolderPathW
SHBrowseForFolderW
SHBindToParent
SHGetPathFromIDListA
kernel32
VirtualAlloc
ntdll
RtlAdjustPrivilege
NtQuerySemaphore
RtlAddAccessAllowedObjectAce
NtSetSystemEnvironmentValueEx
rtutils
TraceDumpExA
TraceDumpExW
Sections
.text Size: 1024B - Virtual size: 1012B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 5KB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 489KB - Virtual size: 488KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ