Static task
static1
Behavioral task
behavioral1
Sample
d1e04abc4f9a5835ad1a43e06408317d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d1e04abc4f9a5835ad1a43e06408317d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d1e04abc4f9a5835ad1a43e06408317d_JaffaCakes118
-
Size
2.5MB
-
MD5
d1e04abc4f9a5835ad1a43e06408317d
-
SHA1
43d404ed2f5b033288de9b47db679705e0d4c422
-
SHA256
928490e6f90aa0b8975435217023be7184866f642170414104687d11a3bd7c47
-
SHA512
04c00652c6982c907b2f7fdfb8be8b1b19b59dab7a9269dc4ee306f01c2399c9925329c007978de156bb9556d56bd8ff06dc458c53218f0a7fe03957c01746ee
-
SSDEEP
24576:qOBLIKulA/zKnTWgjCocroC/vNy0TwUh48HjRro+zbNtG:Z9I+OT/c5HIyh4KjPbNtG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d1e04abc4f9a5835ad1a43e06408317d_JaffaCakes118
Files
-
d1e04abc4f9a5835ad1a43e06408317d_JaffaCakes118.exe windows:4 windows x86 arch:x86
e7bc52de99b064d895367c9caba9dcb7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
setsockopt
WSAGetLastError
inet_addr
htonl
ntohl
htons
inet_ntoa
WSASocketA
sendto
recvfrom
closesocket
WSACleanup
WSAStartup
gethostbyname
gethostbyaddr
netapi32
Netbios
kernel32
GetSystemTime
GetStartupInfoA
GetCommandLineA
SetStdHandle
GetFileType
GetACP
HeapReAlloc
HeapSize
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
FatalAppExitA
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStringTypeA
GetStringTypeW
GetDriveTypeA
SetConsoleCtrlHandler
IsBadReadPtr
IsBadCodePtr
IsValidLocale
GetTimeZoneInformation
EnumSystemLocalesA
GetUserDefaultLCID
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
GetProfileStringA
GetModuleFileNameA
GetLocaleInfoA
GetVersionExA
GetVersion
lstrlenA
lstrlenW
GetCPInfo
LockResource
LoadResource
FindResourceA
lstrcmpiA
FreeLibrary
LoadLibraryA
GetWindowsDirectoryA
WinExec
lstrcatA
DeleteCriticalSection
RaiseException
RtlUnwind
GlobalSize
SetErrorMode
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetOEMCP
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
SizeofResource
LocalAlloc
GlobalFlags
GetCurrentThread
GetCurrentDirectoryA
FileTimeToLocalFileTime
FileTimeToSystemTime
SetFileAttributesA
CreateFileA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSize
GetFileAttributesA
SuspendThread
SetThreadPriority
ResumeThread
lstrcpynA
WritePrivateProfileStringA
GetPrivateProfileIntA
EnterCriticalSection
LeaveCriticalSection
IsValidCodePage
GetSystemDirectoryA
Sleep
GetLocalTime
GetVolumeInformationA
CloseHandle
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GlobalGetAtomNameA
GetModuleHandleA
GlobalLock
GlobalUnlock
GetTempPathA
WriteFile
WaitForMultipleObjects
ReadFile
CreateProcessA
TerminateThread
TerminateProcess
GetExitCodeProcess
CreatePipe
DuplicateHandle
SetEvent
CreateEventA
ResetEvent
WaitForSingleObject
InitializeCriticalSection
GetProcAddress
GetExitCodeThread
ExitThread
GetCurrentProcessId
GetProcessHeap
HeapAlloc
GetTickCount
HeapFree
ReleaseMutex
ExitProcess
GlobalFree
GlobalAlloc
FindFirstFileA
GetPrivateProfileStringA
FindNextFileA
FindClose
lstrcmpA
ExpandEnvironmentStringsA
CreateThread
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetCurrentThreadId
SetLastError
MulDiv
GetLastError
FormatMessageA
LocalFree
CopyFileA
GetCurrentProcess
lstrcpyA
GetUserDefaultLangID
GetSystemDefaultLangID
OpenMutexA
CreateMutexA
user32
ShowOwnedPopups
SetWindowContextHelpId
MapDialogRect
BringWindowToTop
DefFrameProcA
TranslateMDISysAccel
TranslateAcceleratorA
DefMDIChildProcA
LoadAcceleratorsA
SetMenu
ReuseDDElParam
UnpackDDElParam
GetDialogBaseUnits
LockWindowUpdate
CharUpperA
WaitMessage
GetWindowThreadProcessId
CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
UnregisterClassA
RegisterClipboardFormatA
PostThreadMessageA
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
WinHelpA
RegisterClassA
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
GetClassLongA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
GetWindow
SetWindowPos
GetWindowPlacement
EndPaint
BeginPaint
EndDialog
CreateDialogIndirectParamA
IsWindowEnabled
ExitWindowsEx
SetActiveWindow
EnumChildWindows
LoadMenuA
GetMessageA
LoadStringA
DestroyWindow
CreateWindowExA
RegisterClassExA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
OemToCharA
RegisterWindowMessageA
wsprintfA
DestroyMenu
CallNextHookEx
GetClassNameA
GetDCEx
CallWindowProcA
GetPropA
RemovePropA
UnhookWindowsHookEx
SetWindowsHookExA
GetWindowDC
IntersectRect
IsRectEmpty
DrawMenuBar
GetMessagePos
GetMenu
WindowFromDC
EnableMenuItem
CheckMenuItem
IsWindowVisible
SetParent
DrawIcon
GetSystemMenu
LoadIconA
FindWindowA
IsIconic
ShowWindow
SetForegroundWindow
UpdateWindow
GetDlgItem
GetCapture
GetClipCursor
ClipCursor
ScreenToClient
InvertRect
SetRectEmpty
SetWindowRgn
GetClassInfoA
DefWindowProcA
PostQuitMessage
MessageBoxA
LoadCursorA
CopyIcon
IsWindow
SetWindowLongA
ReleaseCapture
RedrawWindow
SetCapture
MessageBeep
GetCursorPos
KillTimer
PtInRect
SetTimer
LoadImageA
GetIconInfo
CreateIconIndirect
DrawStateA
GetClientRect
FrameRect
InflateRect
OffsetRect
DrawFocusRect
GetWindowRect
PostMessageA
ClientToScreen
WindowFromPoint
GetActiveWindow
InvalidateRect
TranslateMessage
ValidateRect
CharToOemA
wvsprintfA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
MoveWindow
SetWindowTextA
SetMenuDefaultItem
IsDialogMessageA
SetCursor
GetNextDlgTabItem
IsMenu
GetWindowLongA
DestroyCursor
GetSubMenu
GrayStringA
TabbedTextOutA
DeleteMenu
RemoveMenu
LoadBitmapA
GetSysColorBrush
GetMenuStringA
CreateMenu
CreatePopupMenu
GetMenuItemID
GetMenuState
ModifyMenuA
GetMenuItemCount
InsertMenuA
AppendMenuA
GetSystemMetrics
GetDesktopWindow
GetDC
DrawTextA
ReleaseDC
DrawIconEx
DestroyIcon
SystemParametersInfoA
GetSysColor
CopyRect
FillRect
DrawEdge
SetRect
GetMenuItemInfoA
EnableWindow
GetParent
SendMessageA
IsWindowUnicode
DefDlgProcA
ExcludeUpdateRgn
ShowCaret
HideCaret
SetPropA
gdi32
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetCurrentPositionEx
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetBkMode
PolyBezierTo
GetClipRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
GetViewportExtEx
GetWindowExtEx
ExtCreatePen
CreatePatternBrush
CreateDIBPatternBrushPt
GetDCOrgEx
CreateRectRgnIndirect
GetMapMode
SetRectRgn
DPtoLP
StretchDIBits
GetCharWidthA
GetTextMetricsA
CopyMetaFileA
CreateDCA
GetTextColor
GetBkColor
LPtoDP
SelectPalette
RestoreDC
SaveDC
StartDocA
StretchBlt
CreateFontA
RoundRect
GetViewportOrgEx
SetViewportOrgEx
CreatePolygonRgn
CreateRectRgn
CombineRgn
GetCurrentObject
CreateBitmap
SetBkColor
SetTextColor
GetStockObject
CreateHatchBrush
Rectangle
Escape
ExtTextOutA
TextOutA
RectVisible
PatBlt
PtVisible
GetObjectA
GetPixel
SetPixel
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
Ellipse
GetTextExtentPoint32A
GetTextExtentPoint32W
CreateCompatibleBitmap
BitBlt
CreateCompatibleDC
CreateFontIndirectA
CreatePen
GetBkMode
GetDeviceCaps
GetTextExtentPointA
SetColorAdjustment
CreateDIBitmap
CreateSolidBrush
comdlg32
GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
AdjustTokenPrivileges
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
RegSetValueExA
RegCreateKeyExA
RegEnumKeyA
RegEnumValueA
RegCreateKeyA
RegOpenKeyA
RegDeleteValueA
RegDeleteKeyA
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueA
LookupPrivilegeValueA
RegCloseKey
RegQueryInfoKeyA
RegEnumKeyExA
shell32
SHGetFileInfoA
DragQueryFileA
DragFinish
DragAcceptFiles
SHAppBarMessage
Shell_NotifyIconA
ShellExecuteExA
ShellExecuteA
ExtractIconA
comctl32
ImageList_Draw
ImageList_GetImageCount
ImageList_GetIcon
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetIconSize
_TrackMouseEvent
ImageList_GetImageInfo
ord17
ord13
ord14
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Merge
ImageList_Read
ImageList_Write
ImageList_DrawIndirect
ImageList_Duplicate
oledlg
ord8
ole32
CreateILockBytesOnHGlobal
CoDisconnectObject
CoUninitialize
CoCreateInstance
CoInitialize
StringFromGUID2
CoCreateGuid
CLSIDFromProgID
CLSIDFromString
OleDuplicateData
CoTaskMemAlloc
CreateBindCtx
CoTaskMemFree
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
StringFromCLSID
CoTreatAsClass
ReleaseStgMedium
CoGetClassObject
StgOpenStorageOnILockBytes
CreateStreamOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
OleRun
StgCreateDocfileOnILockBytes
olepro32
ord253
oleaut32
SafeArrayDestroy
SafeArrayUnlock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromDate
VarDateFromStr
SafeArrayDestroyData
VarCyFromStr
SysStringByteLen
SysFreeString
SysAllocStringByteLen
SysAllocString
VariantCopy
SafeArrayLock
VariantClear
SafeArrayCreate
SafeArrayGetDim
VarBstrFromCy
SafeArrayDestroyDescriptor
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen
SysReAllocStringLen
LoadTypeLi
VariantChangeType
SafeArrayRedim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
wininet
InternetQueryDataAvailable
HttpQueryInfoA
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetReadFile
InternetGetConnectedState
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetGetLastResponseInfoA
GopherFindFirstFileA
InternetFindNextFileA
FtpFindFirstFileA
HttpSendRequestExA
HttpEndRequestA
HttpAddRequestHeadersA
GopherOpenFileA
GopherGetAttributeA
GopherCreateLocatorA
FtpGetFileA
FtpPutFileA
FtpOpenFileA
FtpGetCurrentDirectoryA
FtpSetCurrentDirectoryA
FtpRemoveDirectoryA
FtpCreateDirectoryA
FtpRenameFileA
FtpDeleteFileA
InternetErrorDlg
InternetWriteFile
InternetSetFilePointer
InternetGetCookieA
InternetSetCookieA
InternetSetStatusCallback
InternetSetOptionExA
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
msimg32
GradientFill
Sections
.text Size: 928KB - Virtual size: 927KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 152KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 48KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ