Static task
static1
Behavioral task
behavioral1
Sample
d69f07a380d9430714e6bf9dfd9af2f6_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d69f07a380d9430714e6bf9dfd9af2f6_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
d69f07a380d9430714e6bf9dfd9af2f6_JaffaCakes118
-
Size
477KB
-
MD5
d69f07a380d9430714e6bf9dfd9af2f6
-
SHA1
2fcab69a2a14ee867d8a84250b3a30f03ef7d779
-
SHA256
c7cb81c0a96ff78667590a8b1b60097e8d9a906804e3231e323e2e92dc244e33
-
SHA512
6306f4e1c2f25d829d56cbdf65cb6170936c07a2b331586ef48f24e2a351897882dc39d8d7bcef27c84c5e1fa6e6c0d85eeece51b9ce948386df2578be2575b5
-
SSDEEP
6144:81fJy4nX4Ie8CPfpyN0WMJtMb1HKLry8+pWSJblotwbViUB1yD0uIGhx3L5N0dU:+fU4nXa8CsN0WMJtMb2+o+Y50kN0dU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d69f07a380d9430714e6bf9dfd9af2f6_JaffaCakes118
Files
-
d69f07a380d9430714e6bf9dfd9af2f6_JaffaCakes118.exe windows:4 windows x86 arch:x86
15e649d17c3ec0870c9f91b68f91fd16
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
CreateDirectoryW
GetFileAttributesW
CopyFileW
WriteFile
CloseHandle
lstrcpynW
GetModuleHandleW
LoadLibraryExW
FreeLibrary
GetModuleFileNameW
MulDiv
lstrcmpW
CompareStringW
GlobalHandle
GlobalFree
SetLastError
GlobalLock
GlobalUnlock
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
GetLastError
lstrlenW
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetStringTypeW
GetStringTypeA
GetConsoleMode
LoadLibraryW
LCMapStringW
LCMapStringA
IsValidCodePage
GetCurrentThreadId
GetCPInfo
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
ExitProcess
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
HeapCreate
IsDebuggerPresent
UnhandledExceptionFilter
VirtualQuery
GetModuleHandleA
VirtualProtect
GetStartupInfoW
RtlUnwind
ReleaseSemaphore
CreateSemaphoreW
OpenProcess
SetUnhandledExceptionFilter
GlobalSize
TerminateProcess
GetProcAddress
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
FormatMessageW
LocalAlloc
LocalFree
WideCharToMultiByte
GetShortPathNameW
CreateThread
Sleep
GetTempPathW
GetConsoleCP
CreateFileW
MultiByteToWideChar
GlobalAlloc
GetCurrentProcess
FlushInstructionCache
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InterlockedExchangeAdd
GetSystemDirectoryW
WaitForMultipleObjects
GetTickCount
WaitForMultipleObjectsEx
GetVersionExW
GetSystemInfo
SetEndOfFile
GetFileSize
FlushFileBuffers
ReadFile
ReleaseMutex
OpenMutexW
CreateMutexW
GetCommandLineW
lstrlenA
SetFilePointer
OutputDebugStringW
GetCurrentProcessId
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetOEMCP
RaiseException
GetLocalTime
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
user32
EnableMenuItem
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
CharNextW
DefWindowProcW
GetWindowLongW
DestroyMenu
CreateWindowExW
GetSystemMenu
MoveWindow
SetWindowPos
GetClientRect
DestroyWindow
GetWindow
GetParent
GetDlgItem
DispatchMessageW
DispatchMessageA
TranslateMessage
GetMessageW
GetMessageA
SetWindowLongW
EndDialog
MapDialogRect
wsprintfW
FindWindowW
ExitWindowsEx
GetMenuItemCount
GetMenuItemID
GetActiveWindow
GetSystemMetrics
LoadImageW
CreateAcceleratorTableW
AdjustWindowRectEx
KillTimer
SetTimer
GetMenu
DestroyAcceleratorTable
GetDesktopWindow
IsChild
RedrawWindow
InvalidateRgn
ClientToScreen
GetClassNameW
FillRect
MessageBoxW
OffsetRect
ReleaseDC
GetDC
EndPaint
BeginPaint
GetSysColor
GetFocus
GetCapture
ReleaseCapture
GetCursorPos
PtInRect
SetCursor
DrawTextW
DrawFocusRect
CallWindowProcW
IsWindow
GetDlgCtrlID
SetFocus
SetCapture
IsWindowEnabled
InvalidateRect
UpdateWindow
ScreenToClient
DialogBoxIndirectParamW
RegisterWindowMessageW
GetClassInfoExW
LoadCursorW
RegisterClassExW
SetRectEmpty
GetWindowRect
SystemParametersInfoW
MapWindowPoints
IsDialogMessageW
SetWindowContextHelpId
SendMessageW
UnregisterClassA
MsgWaitForMultipleObjectsEx
PeekMessageW
IsWindowUnicode
gdi32
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontIndirectW
SetTextColor
SelectObject
GetObjectW
SetBkMode
GetStockObject
DeleteDC
DeleteObject
CreateSolidBrush
advapi32
TraceMessage
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
LookupPrivilegeValueW
OpenProcessToken
AdjustTokenPrivileges
RegEnumValueW
shell32
ShellExecuteW
SHGetFolderPathW
SHGetSpecialFolderPathW
ole32
OleLoadFromStream
CoInitialize
CoUninitialize
OleSaveToStream
CLSIDFromProgID
CoGetClassObject
OleLockRunning
StringFromGUID2
CLSIDFromString
GetHGlobalFromStream
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
oleaut32
SysAllocStringByteLen
LoadRegTypeLi
LoadTypeLi
SysStringByteLen
VarUI4FromStr
VariantClear
VariantInit
SysAllocString
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayCreateVector
SafeArrayLock
SafeArrayPtrOfIndex
SafeArrayUnlock
SafeArrayCreate
OleCreateFontIndirect
VariantCopyInd
SysAllocStringLen
SysFreeString
SysStringLen
shlwapi
PathAddBackslashW
PathRemoveFileSpecW
PathIsUNCServerW
PathAppendW
comctl32
InitCommonControlsEx
ImageList_Destroy
_TrackMouseEvent
ImageList_GetIconSize
gdiplus
GdipCloneImage
GdipDeleteGraphics
GdipCreateFromHDC
GdipDrawImageRectRectI
GdipGetImageWidth
GdipGetImageHeight
GdipDrawImageRectI
GdiplusShutdown
GdiplusStartup
GdipFree
GdipAlloc
GdipLoadImageFromStream
GdipDisposeImage
wininet
HttpOpenRequestW
InternetCloseHandle
InternetOpenW
InternetConnectW
HttpSendRequestW
HttpQueryInfoW
psapi
GetModuleBaseNameW
userenv
UnloadUserProfile
imagehlp
MapFileAndCheckSumW
Sections
.text Size: 322KB - Virtual size: 321KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 915KB - Virtual size: 915KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ