Static task
static1
Behavioral task
behavioral1
Sample
d686ee53753ddf921c2f9a3aace47822_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d686ee53753ddf921c2f9a3aace47822_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d686ee53753ddf921c2f9a3aace47822_JaffaCakes118
-
Size
744KB
-
MD5
d686ee53753ddf921c2f9a3aace47822
-
SHA1
dcb2c95cf21dde240b3976b04b205e75f422749e
-
SHA256
3adad82bc3c1475a2afb7ec413efe57554db7f3304b381a8fa4fa4aa4013fb18
-
SHA512
a1d5a1e0b7d3c8e204a1ad28eeb3cafdc990d63a8339dd07b92aeb9387f0d31f1e3863b6e4420abb317aaa4f7d6942fca2360f8f511abe1049cd3047e2578bfe
-
SSDEEP
12288:pgsijz79ebg6LkYHX5JP2wp4CFKwxxLosYSX24TS5P88O4:2JjzqNLvP3FKwxVosjHO28O4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d686ee53753ddf921c2f9a3aace47822_JaffaCakes118
Files
-
d686ee53753ddf921c2f9a3aace47822_JaffaCakes118.exe windows:4 windows x86 arch:x86
fe23209c6fa033aad3e26617035b78ec
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winspool.drv
ClosePrinter
DocumentPropertiesW
GetJobW
OpenPrinterW
ord204
EnumPrintersW
user32
SetForegroundWindow
GetWindowPlacement
SetFocus
GetDlgItem
IsWindow
ChildWindowFromPoint
GetWindowRect
CreateWindowExW
GetClassNameW
EnumChildWindows
TrackPopupMenuEx
MoveWindow
CopyRect
CreatePopupMenu
RegisterClassW
PostMessageW
DestroyWindow
EndPaint
SetWindowPlacement
IsWindowEnabled
KillTimer
OffsetRect
TrackPopupMenu
LoadCursorW
SetScrollInfo
DestroyCaret
LoadIconW
GetNextDlgTabItem
EmptyClipboard
InflateRect
AttachThreadInput
MessageBoxW
GetMenuItemCount
GetWindowTextW
GetWindow
GetMenuItemInfoW
GetDesktopWindow
UnregisterHotKey
ClientToScreen
SetMenuItemInfoW
LoadAcceleratorsW
IsWindowVisible
DefWindowProcW
RegisterClassExW
IntersectRect
SetCapture
GetKeyState
LoadBitmapW
EnableWindow
GetSubMenu
SetMenu
SetCursor
CallNextHookEx
GetDlgCtrlID
MapDialogRect
FindWindowW
TranslateMessage
GetCursorPos
CheckMenuItem
SetActiveWindow
DestroyIcon
GetFocus
ReleaseDC
SetWindowPos
ScreenToClient
SystemParametersInfoA
PtInRect
BeginPaint
SetTimer
RegisterHotKey
SendMessageW
ShowWindow
GetScrollInfo
UpdateWindow
MessageBeep
kernel32
IsDebuggerPresent
LocalAlloc
GetCurrentThreadId
IsValidCodePage
RaiseException
InterlockedIncrement
LeaveCriticalSection
GetStringTypeA
GetCommandLineA
WideCharToMultiByte
LoadLibraryExW
UnmapViewOfFile
SetLastError
GetCurrentProcess
LockFile
LoadResource
VirtualQuery
GlobalDeleteAtom
Sleep
DeleteFileW
GlobalAlloc
DuplicateHandle
VirtualAlloc
SetEndOfFile
GetEnvironmentStringsW
FreeLibrary
GetThreadLocale
GetUserDefaultLangID
SetStdHandle
GetVersionExA
CreateEventW
QueryPerformanceCounter
GetFileType
GlobalHandle
SetUnhandledExceptionFilter
InitializeCriticalSection
TerminateThread
WriteConsoleA
SetEvent
MulDiv
lstrcmpW
GetWindowsDirectoryW
TerminateProcess
SetFileAttributesW
GetPrivateProfileStringW
MoveFileW
GetStartupInfoW
VirtualFree
GetStringTypeW
GetCPInfo
ConvertDefaultLocale
LocalReAlloc
HeapSize
TlsAlloc
GetLocaleInfoA
FormatMessageW
GetFileTime
GlobalFlags
GetVolumeInformationW
GetTimeZoneInformation
GetCurrentDirectoryW
FreeEnvironmentStringsA
SetThreadPriority
GetSystemInfo
SetHandleCount
GetCurrentProcessId
UnhandledExceptionFilter
GetConsoleMode
GetLocalTime
MultiByteToWideChar
GetEnvironmentStrings
SizeofResource
FileTimeToLocalFileTime
RtlUnwind
lstrcmpiW
GetFileAttributesW
GetVersionExW
CreateFileW
OutputDebugStringW
GetUserDefaultLCID
GetFullPathNameW
GlobalLock
EnterCriticalSection
CreateDirectoryW
lstrcpyW
GlobalUnlock
InterlockedCompareExchange
IsValidLocale
ResumeThread
GetDateFormatW
GetCurrentDirectoryA
LocalFree
GlobalSize
GlobalReAlloc
GlobalAddAtomW
FindNextFileW
lstrlenA
FreeEnvironmentStringsW
FindClose
GetTempPathW
FindResourceW
HeapReAlloc
GetTimeFormatW
HeapCreate
lstrcatW
GetTickCount
GetSystemDirectoryW
CreateThread
SetFilePointer
VirtualProtect
GetDriveTypeA
CompareStringW
lstrcmpiA
InterlockedExchange
LoadLibraryW
LoadLibraryA
GetLastError
SystemTimeToFileTime
TlsSetValue
GetModuleFileNameA
GetConsoleOutputCP
ExpandEnvironmentStringsA
DeleteCriticalSection
CopyFileW
lstrcmpA
CompareStringA
InterlockedDecrement
CreateFileMappingW
TlsFree
HeapAlloc
ReadFile
LocalFileTimeToFileTime
GetStdHandle
LCMapStringA
GetModuleHandleA
GetACP
HeapFree
lstrcpyA
FlushFileBuffers
SetFileTime
GetProcAddress
GetOEMCP
ExitProcess
GetStartupInfoA
GetConsoleCP
lstrlenW
CreateFileA
ReleaseMutex
TlsGetValue
UnlockFile
WriteConsoleW
GetTempFileNameW
SetEnvironmentVariableA
FileTimeToSystemTime
GetFileSize
LCMapStringW
CloseHandle
GetSystemTime
GetProcessHeap
GlobalFree
WritePrivateProfileStringW
GetModuleFileNameW
WaitForSingleObject
GetVersion
GetLocaleInfoW
ResetEvent
WriteFile
GetDateFormatA
GetSystemTimeAsFileTime
LockResource
GetStringTypeExW
CreateMutexW
GetCommandLineW
HeapDestroy
GetModuleHandleW
lstrcpynW
FindFirstFileW
GetTimeFormatA
advapi32
CloseServiceHandle
RegSetValueExA
RegDeleteValueA
RegEnumKeyExA
RegQueryValueA
QueryServiceStatus
RegEnumValueA
AdjustTokenPrivileges
GetUserNameA
RegEnumKeyA
LookupPrivilegeValueA
OpenSCManagerA
RegDeleteKeyA
InitializeSecurityDescriptor
CreateServiceA
RegOpenKeyA
RegCreateKeyA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
FreeSid
SetSecurityDescriptorDacl
OpenProcessToken
ChangeServiceConfigA
QueryServiceConfigA
StartServiceA
OpenServiceA
gdi32
SetStretchBltMode
SetBrushOrgEx
RealizePalette
SetBkMode
Rectangle
GetStockObject
ScaleWindowExtEx
SetROP2
DeleteObject
MoveToEx
SetWindowExtEx
CreatePalette
BitBlt
GetObjectW
SetViewportExtEx
SelectObject
CreatePolygonRgn
CreateRectRgnIndirect
GetTextCharsetInfo
PatBlt
GetTextFaceA
MaskBlt
SetMapMode
GetDeviceCaps
Escape
ExtSelectClipRgn
PtInRegion
StretchBlt
ExtTextOutW
CreatePen
ExcludeClipRect
ExtCreateRegion
SetPixel
CreateCompatibleBitmap
GetTextExtentPointA
CreateDIBSection
SelectClipRgn
GetMapMode
SetTextAlign
SetTextColor
GetBkColor
EqualRgn
EnumFontFamiliesExA
GetBkMode
CreateDIBitmap
CreateRectRgn
CreateCompatibleDC
GetTextExtentPoint32W
CreateSolidBrush
LPtoDP
GetDIBits
SetAbortProc
RectVisible
SetWindowOrgEx
StretchDIBits
CreateEllipticRgn
RectInRegion
GetRgnBox
SetPolyFillMode
OffsetRgn
RoundRect
IntersectClipRect
ScaleViewportExtEx
CreateFontIndirectW
CreatePatternBrush
CreateBitmap
shell32
SHGetFileInfoW
SHGetSpecialFolderLocation
SHChangeNotify
DragQueryFileW
ord155
ShellExecuteW
CommandLineToArgvW
DragFinish
Sections
.text Size: 120KB - Virtual size: 117KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 480KB - Virtual size: 479KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ