Static task
static1
Behavioral task
behavioral1
Sample
d3d0739419529e1b75a0049e14120cbf_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d3d0739419529e1b75a0049e14120cbf_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d3d0739419529e1b75a0049e14120cbf_JaffaCakes118
-
Size
332KB
-
MD5
d3d0739419529e1b75a0049e14120cbf
-
SHA1
63db6f2541d2363c0da8ef2488413ac68a1644ce
-
SHA256
170e5930891ffce4a9162f6117f6bf9e623b99cbf79364e9f00c3298c3207a7f
-
SHA512
869725315d013418c41fb29e90e981c61dd540b4da91e18c6e53ea6ecc82c7c4d341d0f8acb6cffcf674bda5efb86d1108ea0106fc84bf9d345114c1c045aedf
-
SSDEEP
6144:OwhGxxs62wkzEqpHFeor9M2WUtejqRfXuvpX4tl8ZGIgDvyS8kB8wjgScWBD:OWGzs6xjqp/Bftejq0xYVvyk9WW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d3d0739419529e1b75a0049e14120cbf_JaffaCakes118
Files
-
d3d0739419529e1b75a0049e14120cbf_JaffaCakes118.exe windows:5 windows x86 arch:x86
5c0483e20e87c0c7f76a88c56289b476
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
DragQueryFileW
SHChangeNotify
SHPathPrepareForWriteW
ExtractAssociatedIconExW
SHGetFolderLocation
SHGetDataFromIDListW
ShellExecuteA
SHGetSpecialFolderPathW
ShellExecuteW
SHGetInstanceExplorer
SHAppBarMessage
SHGetFolderPathW
ExtractIconExW
SHGetPathFromIDListW
Shell_NotifyIconW
ShellExecuteExW
SHGetPathFromIDListA
SHBindToParent
SHBrowseForFolderW
Shell_NotifyIconA
SHGetFileInfoW
SHFileOperationW
ExtractIconW
SHGetDesktopFolder
SHSetLocalizedName
SHGetFolderPathAndSubDirW
ShellAboutW
SHGetSpecialFolderLocation
SHCreateShellItem
kernel32
SetThreadExecutionState
GlobalDeleteAtom
CopyFileW
ReleaseMutex
OpenMutexW
TerminateThread
ResetEvent
SetProcessWorkingSetSize
GetProcAddress
LoadLibraryA
GetVersion
FileTimeToLocalFileTime
ExitProcess
GetFileSize
SizeofResource
GetLocalTime
TlsGetValue
GetThreadPriority
InterlockedIncrement
SetFileTime
LoadLibraryExW
GlobalFlags
GetVersionExA
WritePrivateProfileStringW
CreateProcessW
CreateActCtxW
DisableThreadLibraryCalls
VirtualFree
DeleteFileW
FindResourceExW
OpenEventW
GetTempPathW
lstrcmpW
ReplaceFileW
CreateDirectoryW
ReleaseActCtx
CreateMutexA
GetModuleHandleExW
ResumeThread
GetUserDefaultLCID
TlsFree
SuspendThread
SetThreadPriority
MoveFileExW
GetFileSizeEx
FindClose
GetLongPathNameW
UnhandledExceptionFilter
DuplicateHandle
CreateEventA
HeapReAlloc
SetFilePointer
MapViewOfFile
InterlockedDecrement
GlobalLock
lstrcmpiA
GetLastError
GetPrivateProfileStringA
WaitForSingleObject
GetCPInfo
FileTimeToSystemTime
GetShortPathNameW
GlobalAlloc
VirtualProtect
LocalFree
SetEvent
GetSystemTime
DeactivateActCtx
GetEnvironmentVariableW
IsDBCSLeadByte
TlsSetValue
GetModuleHandleExA
GetSystemDefaultUILanguage
LocalAlloc
GetFileAttributesA
AddAtomW
GetPrivateProfileSectionNamesW
DebugBreak
LocalFileTimeToFileTime
WriteFile
lstrlenA
SetCurrentDirectoryA
GetLogicalDriveStringsW
FindResourceW
QueueUserWorkItem
GetCurrentProcess
CompareFileTime
LockFileEx
ActivateActCtx
InitializeCriticalSection
VirtualQuery
HeapAlloc
TlsAlloc
IsWow64Process
SetCurrentDirectoryW
DeleteCriticalSection
Process32NextW
CreateDirectoryA
LoadResource
EnterCriticalSection
SetThreadContext
DeleteAtom
CreateTimerQueueTimer
GetTickCount
CreateFileA
Process32FirstW
SetErrorMode
SearchPathW
WaitForSingleObjectEx
FlushInstructionCache
HeapDestroy
lstrlenW
LocalSize
GetCurrentThread
GetModuleFileNameW
CreateFileMappingA
GetModuleHandleA
CompareStringA
GetLocaleInfoW
FormatMessageW
OpenProcess
InitializeCriticalSectionAndSpinCount
WaitForMultipleObjects
CreateSemaphoreW
FindFirstFileW
OutputDebugStringA
TryEnterCriticalSection
FindAtomW
ExpandEnvironmentStringsW
CreateFileW
GlobalFree
MulDiv
MoveFileW
GetPrivateProfileSectionW
GetCurrentThreadId
ReleaseSemaphore
ExpandEnvironmentStringsA
GetModuleHandleW
Sleep
GetSystemDirectoryW
GetFileAttributesExW
RemoveDirectoryW
CompareStringW
InterlockedExchange
SetLastError
TerminateProcess
SetProcessShutdownParameters
EnumUILanguagesW
GetSystemWow64DirectoryW
HeapFree
GetDateFormatW
GetWindowsDirectoryW
GetTempFileNameW
GetModuleFileNameA
LoadLibraryW
QueryDosDeviceW
GetSystemDirectoryA
CreateToolhelp32Snapshot
GetSystemInfo
GetACP
GetCurrentProcessId
GetExitCodeThread
GetCurrentDirectoryW
CreateThread
LeaveCriticalSection
lstrcmpiW
WideCharToMultiByte
SetUnhandledExceptionFilter
GlobalSize
MultiByteToWideChar
GetFullPathNameW
GetVersionExW
QueryPerformanceCounter
OpenMutexA
WritePrivateProfileSectionW
GetNumberFormatW
GetThreadLocale
InterlockedCompareExchange
GlobalAddAtomA
GetFileInformationByHandle
SystemTimeToFileTime
CloseHandle
SetEndOfFile
GlobalAddAtomW
GetPrivateProfileStringW
GetThreadContext
UnmapViewOfFile
lstrcmpA
DeleteTimerQueueTimer
CreateEventW
GlobalUnlock
LCMapStringW
FindNextFileW
HeapCreate
FreeLibraryAndExitThread
GetTimeFormatW
ReadFile
UnlockFileEx
LocalReAlloc
QueryPerformanceFrequency
SetFilePointerEx
GetUserDefaultUILanguage
SetFileAttributesW
CreateFileMappingW
GetSystemTimeAsFileTime
GetSystemDefaultLCID
LockResource
GetProcessHeap
VirtualAlloc
GlobalReAlloc
SetEnvironmentVariableW
GetAtomNameW
GetFileAttributesW
CreateMutexW
FreeLibrary
RaiseException
gdi32
GetTextExtentPoint32A
CreateFontIndirectW
CreateEnhMetaFileA
GetDeviceCaps
GetBkColor
SetViewportExtEx
SelectObject
CreateDCW
LPtoDP
BitBlt
SetDCPenColor
SetBkMode
DeleteDC
SetWindowOrgEx
SetBrushOrgEx
ExtCreateRegion
StretchDIBits
SetBkColor
GetTextExtentExPointI
PatBlt
CreatePen
CreateDIBPatternBrushPt
GetRgnBox
SetRectRgn
CreateDCA
GetGlyphIndicesW
GetStockObject
LineTo
CreateBitmap
SetTextAlign
GetTextMetricsW
SetWindowExtEx
GetDCOrgEx
CreateRectRgnIndirect
SetViewportOrgEx
PlayEnhMetaFile
GetObjectA
CreateCompatibleDC
GetSystemPaletteEntries
ExtTextOutW
GetTextCharset
DeleteEnhMetaFile
SetMapMode
GetLayout
TextOutW
OffsetWindowOrgEx
SaveDC
GetClipBox
CloseEnhMetaFile
SetLayout
OffsetRgn
IntersectClipRect
SetTextColor
RealizePalette
GetTextAlign
GetBkMode
CreateRectRgn
CreateDIBSection
CreateCompatibleBitmap
GetTextExtentPointW
GetBrushOrgEx
GetDIBits
GetObjectW
SetPaletteEntries
StretchBlt
MoveToEx
CreatePatternBrush
EqualRgn
SelectPalette
CombineRgn
Rectangle
CreateSolidBrush
SetStretchBltMode
GetTextColor
CreatePalette
RestoreDC
RectVisible
GetPixel
DeleteObject
CreateMetaFileW
CreateFontW
CreateFontIndirectA
GetPaletteEntries
GetTextExtentPoint32W
CloseMetaFile
CreateHalftonePalette
TextOutA
CreatePolygonRgn
GetRegionData
uxtheme
DrawThemeBackground
GetThemeMetric
SetWindowTheme
DrawThemeParentBackground
GetThemeBackgroundExtent
GetThemeAppProperties
GetThemePartSize
IsAppThemed
GetThemeMargins
OpenThemeData
IsThemeActive
GetThemeFont
GetThemeColor
GetThemeBackgroundContentRect
CloseThemeData
advapi32
CryptReleaseContext
TraceMessage
GetTraceEnableFlags
RegDeleteValueA
GetLengthSid
RegDeleteKeyW
RegEnumKeyW
ConvertStringSidToSidW
RegQueryInfoKeyW
GetTokenInformation
RegCreateKeyA
RegCreateKeyExW
ImpersonateSelf
CryptDestroyHash
CryptCreateHash
RegOpenKeyExW
RegCloseKey
CryptGetHashParam
GetTraceEnableLevel
OpenProcessToken
ConvertSidToStringSidW
UnregisterTraceGuids
IsTextUnicode
CreateProcessAsUserW
RegisterTraceGuidsW
GetUserNameW
RegQueryValueExA
RegCreateKeyExA
OpenThreadToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
CryptHashData
GetTraceLoggerHandle
DuplicateTokenEx
TraceEvent
RegEnumKeyExW
RegQueryValueExW
RegOpenCurrentUser
CryptAcquireContextW
RegSetValueExA
RegQueryValueW
SetTokenInformation
RegDeleteValueW
SetThreadToken
RegOpenKeyW
RegEnumValueW
RegDeleteKeyA
RegSetValueExW
RegOpenKeyExA
RegEnumValueA
ntdll
RtlUshortByteSwap
LdrGetDllHandle
NtAllocateVirtualMemory
user32
DdeFreeDataHandle
GetClipboardFormatNameW
DdeConnect
GetProcessWindowStation
GetDlgItem
IntersectRect
PostQuitMessage
CallWindowProcW
FindWindowA
CallNextHookEx
SetWindowTextW
GetClassInfoW
CharNextW
DdeNameService
SetWindowPos
GetMenuState
TrackPopupMenuEx
EnableWindow
MessageBoxIndirectW
GetAncestor
GetDoubleClickTime
PeekMessageA
MessageBoxW
SetDlgItemInt
GetCursor
GetCursorPos
MapVirtualKeyW
DispatchMessageA
GetMenuItemInfoA
GetWindowLongW
PtInRect
SetWindowRgn
TranslateAcceleratorW
RegisterClassW
ShowWindow
CheckDlgButton
AttachThreadInput
CreateWindowExW
GetClientRect
CharNextA
CreateIconIndirect
SetActiveWindow
SetForegroundWindow
SetMenuDefaultItem
RegisterWindowMessageA
GetMonitorInfoW
GetIconInfo
CheckMenuRadioItem
GetScrollInfo
MonitorFromWindow
AdjustWindowRect
IsRectEmpty
AnimateWindow
GetMessagePos
IsChild
TrackMouseEvent
PostThreadMessageW
GetClassNameW
DrawTextExW
GetWindowInfo
DrawFrameControl
SetScrollInfo
CallMsgFilterW
GetWindowDC
CharPrevW
GetAsyncKeyState
SetFocus
DdeGetData
EnumDesktopWindows
ShowCaret
SetWindowPlacement
RemovePropW
MonitorFromRect
DestroyIcon
MessageBoxExA
UpdateWindow
MoveWindow
MsgWaitForMultipleObjects
SetPropW
DestroyMenu
MessageBeep
GetMenuItemInfoW
IsWindow
UnionRect
PostMessageW
IsWindowEnabled
DialogBoxIndirectParamA
GetKeyState
DestroyWindow
GetDialogBaseUnits
SetDlgItemTextW
DestroyAcceleratorTable
CreateMenu
CreatePopupMenu
DefWindowProcA
GetLastActivePopup
CopyIcon
TrackPopupMenu
LoadStringA
EndMenu
GetDC
SetCapture
GetSubMenu
GetCapture
GetWindowLongA
LoadAcceleratorsW
IsIconic
IsDlgButtonChecked
SetMenu
GetForegroundWindow
SendMessageW
ShowScrollBar
LoadStringW
BeginPaint
OffsetRect
DdeCreateDataHandle
MapDialogRect
DdeUninitialize
SetTimer
MsgWaitForMultipleObjectsEx
ReleaseDC
InsertMenuW
CheckRadioButton
ReleaseCapture
IsCharAlphaNumericW
SetWindowLongW
IsWindowUnicode
DrawFocusRect
PostThreadMessageA
GetMenuDefaultItem
MessageBoxIndirectA
ChangeClipboardChain
DdeDisconnect
UnhookWindowsHookEx
InvalidateRect
GetPropA
DdeClientTransaction
GetWindow
UnregisterClassW
GetSysColor
EqualRect
GetClassLongW
GetDesktopWindow
InsertMenuItemW
WaitForInputIdle
LoadBitmapW
SendMessageTimeoutW
IsMenu
PeekMessageW
SetScrollPos
EnumThreadWindows
EndDialog
LoadCursorW
SendNotifyMessageW
AdjustWindowRectEx
GetParent
DeleteMenu
WinHelpW
GetClipboardData
FindWindowW
SetParent
CharPrevA
ChildWindowFromPoint
EnumChildWindows
AppendMenuW
CopyImage
DispatchMessageW
GetWindowRgnBox
GetClassInfoExW
GetMenuItemID
EnableMenuItem
DrawEdge
IsDialogMessageW
SetMenuItemBitmaps
DdeFreeStringHandle
EnumWindows
EndPaint
DrawIconEx
InflateRect
WindowFromPoint
BeginDeferWindowPos
SetRect
DrawTextW
ScreenToClient
GetLastInputInfo
SetCursor
DdeInitializeW
LoadIconW
GetWindowTextLengthW
CharLowerW
CharUpperW
MessageBoxExW
EmptyClipboard
ClientToScreen
GetComboBoxInfo
DdeQueryStringW
SetWindowLongA
SystemParametersInfoA
SetMenuItemInfoW
LoadMenuW
GetSystemMetrics
LockSetForegroundWindow
CloseClipboard
RegisterClipboardFormatA
FillRect
RemovePropA
TranslateMessage
DialogBoxIndirectParamW
HideCaret
GetShellWindow
DialogBoxParamW
LoadCursorA
EndDeferWindowPos
SendMessageTimeoutA
CopyRect
MonitorFromPoint
DeferWindowPos
DefWindowProcW
DialogBoxParamA
SendDlgItemMessageW
UpdateLayeredWindow
GetWindowTextW
GetFocus
RegisterClassExW
GetTopWindow
SetRectEmpty
VkKeyScanExW
OpenClipboard
SystemParametersInfoW
GetKeyNameTextW
GetWindowPlacement
GetWindowRect
GetPropW
GetWindowThreadProcessId
EnumDisplaySettingsW
RegisterWindowMessageW
CharLowerBuffW
GetSystemMenu
RedrawWindow
ShowOwnedPopups
GetDlgItemTextW
FindWindowExW
GetKeyboardLayout
GetMessageA
MapWindowPoints
SetPropA
GetDlgCtrlID
NotifyWinEvent
AllowSetForegroundWindow
IsWindowVisible
DdeCreateStringHandleW
SetClipboardViewer
wsprintfW
GetClassWord
GetActiveWindow
RemoveMenu
LoadImageW
SetClipboardData
CheckMenuItem
RegisterClipboardFormatW
SendMessageA
KillTimer
GetNextDlgTabItem
GetMenuStringW
GetMenuItemCount
SetWindowsHookExW
GetMessageW
WaitMessage
CreateDialogParamW
SetCursorPos
PostMessageA
IsHungAppWindow
GetMessageTime
GetSysColorBrush
psapi
GetProcessImageFileNameW
Sections
.text Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE