Static task
static1
Behavioral task
behavioral1
Sample
e264661d5048fa1db9788da53ff2b13f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
e264661d5048fa1db9788da53ff2b13f_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e264661d5048fa1db9788da53ff2b13f_JaffaCakes118
-
Size
6.2MB
-
MD5
e264661d5048fa1db9788da53ff2b13f
-
SHA1
c5b1eb1418dd5a6f5f3825b48215dd0913bb1fb6
-
SHA256
852240c58cef0e527f1dd62a530cd345130ae9331ca10b02591dc22413b87950
-
SHA512
4cd3d148e229d81c354c1c748a57e9778ca5ae07508032f8fb65225f255b48846f9b1c564dcea966bf0afdc1a3f2fec5ffbd395c1e74ce509846e7c170cec21b
-
SSDEEP
196608:U/Fd9kyTCZYfSz2+ee3O9v2nnUf09zlTha:cBkyTCZYqz2ze3OhJf09hda
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e264661d5048fa1db9788da53ff2b13f_JaffaCakes118
Files
-
e264661d5048fa1db9788da53ff2b13f_JaffaCakes118.exe windows:4 windows x86 arch:x86
7d8dd7ae303bc7f1cdd8515311a9523a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
avifil32
AVIFileExit
AVIFileRelease
AVIStreamRelease
AVIStreamWrite
AVISaveOptions
AVIMakeCompressedStream
AVIStreamSetFormat
AVIFileCreateStreamA
AVIFileOpenA
AVIFileInit
msvfw32
ord2
comctl32
PropertySheetA
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_Create
ord17
ImageList_DrawEx
ImageList_GetIconSize
ord6
ImageList_LoadImageA
CreateToolbarEx
mpr
WNetAddConnection3A
wininet
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetOpenA
InternetAttemptConnect
InternetGetConnectedState
InternetCloseHandle
kernel32
HeapFree
HeapCreate
HeapDestroy
GetComputerNameA
GlobalFree
GlobalAlloc
GetDriveTypeA
SetErrorMode
lstrcmpA
FlushFileBuffers
ReleaseMutex
CreateMutexA
GetPrivateProfileStringA
GetVolumeInformationA
GetCPInfo
GetVersionExA
RemoveDirectoryA
DeviceIoControl
SetLastError
SystemTimeToFileTime
LocalFileTimeToFileTime
SystemTimeToTzSpecificLocalTime
GetThreadPriority
SizeofResource
GetWindowsDirectoryA
GetProcessHeap
GetFullPathNameA
GetShortPathNameA
GetNumberFormatA
RtlUnwind
RaiseException
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
ExitThread
CreateThread
HeapReAlloc
SetEnvironmentVariableA
GetCommandLineA
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetOEMCP
IsValidCodePage
ExitProcess
GetStdHandle
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode
GetLocaleInfoW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
FreeLibrary
WaitForSingleObject
CreateSemaphoreA
CloseHandle
GetModuleHandleA
LoadLibraryA
GetCurrentThreadId
DeleteFileA
CreateFileA
FormatMessageA
GetModuleFileNameA
lstrcpyA
GetLocalTime
GetTimeFormatA
lstrcpynA
lstrlenA
WideCharToMultiByte
InterlockedDecrement
GlobalLock
GlobalUnlock
GetDateFormatA
GetCurrentProcess
CreateDirectoryA
GetTimeZoneInformation
ResetEvent
FindResourceA
LoadResource
LockResource
GetCurrentProcessId
VirtualAlloc
VirtualFree
CopyFileA
TerminateThread
GetFileTime
SetFileTime
OutputDebugStringA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
SetEndOfFile
GetFileSize
GetCurrentDirectoryA
SetCurrentDirectoryA
FindFirstFileA
GetFileAttributesA
SetFileAttributesA
FindNextFileA
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
InitializeCriticalSection
CreateEventA
ResumeThread
SetEvent
InterlockedIncrement
EnterCriticalSection
GetTempPathA
LeaveCriticalSection
DeleteCriticalSection
GetDiskFreeSpaceA
LocalReAlloc
LocalFree
LocalAlloc
OpenProcess
Sleep
TerminateProcess
GetLastError
GetProcAddress
MoveFileA
GetSystemDirectoryA
MulDiv
GetLocaleInfoA
GetTickCount
MultiByteToWideChar
ReadFile
SetFilePointer
VirtualProtect
WriteFile
GetACP
GetVersion
HeapSize
user32
IsZoomed
DrawMenuBar
SetMenu
EnableMenuItem
GetSubMenu
LoadMenuA
GetMenuState
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetMenuItemID
GetMenuItemCount
GetWindowPlacement
SetWindowPlacement
GetWindowDC
LoadIconA
ReleaseCapture
GetCapture
SetCapture
MapWindowPoints
DestroyIcon
PostQuitMessage
ClipCursor
CloseWindow
GetSystemMenu
RegisterWindowMessageA
GetSysColorBrush
DrawEdge
GetMessagePos
WinHelpA
EnumDisplaySettingsA
SetScrollInfo
GetScrollInfo
IsChild
DestroyAcceleratorTable
RemoveMenu
ExitWindowsEx
CharPrevA
SetClipboardData
EmptyClipboard
ScrollWindowEx
SetScrollRange
mouse_event
CharNextA
GetMenuStringA
ToAsciiEx
MapVirtualKeyA
ActivateKeyboardLayout
LoadKeyboardLayoutA
GetKeyboardLayoutNameA
InflateRect
UpdateWindow
GetDlgCtrlID
DrawFrameControl
OffsetRect
LoadStringA
PeekMessageA
EnumChildWindows
GetMenu
GetWindow
SetParent
CopyRect
LoadImageA
DrawStateA
OpenClipboard
GetClipboardData
GetDesktopWindow
IsWindowVisible
GetKeyState
GetCursor
GetKeyboardLayout
MapVirtualKeyExA
GetKeyNameTextA
ClientToScreen
BringWindowToTop
GetFocus
IsWindowEnabled
CheckRadioButton
ScreenToClient
IsDlgButtonChecked
GetDlgItemInt
CheckDlgButton
GetWindowTextLengthA
GetWindowTextA
SetTimer
GetClientRect
DrawTextA
SetDlgItemInt
SetWindowTextA
PostThreadMessageA
CallWindowProcA
LoadBitmapA
CreatePopupMenu
InsertMenuA
CheckMenuItem
DestroyMenu
SendDlgItemMessageA
EnableWindow
ReleaseDC
SetDlgItemTextA
SetFocus
GetDlgItemTextA
MoveWindow
GetWindowRect
GetSystemMetrics
SetWindowPos
GetParent
KillTimer
UnregisterClassA
RegisterClassA
GetWindowLongA
SetWindowLongA
GetCursorPos
GetActiveWindow
SetCursor
LoadCursorA
UnhookWindowsHookEx
wsprintfA
EnumWindows
GetClassNameA
GetWindowThreadProcessId
SendMessageA
CreateDialogParamA
DialogBoxParamA
EndDialog
GetSysColor
GetDC
RegisterClassExA
GetPropA
DefWindowProcA
SetPropA
BeginPaint
FillRect
EndPaint
RemovePropA
CreateWindowExA
DestroyWindow
InvalidateRect
RedrawWindow
MessageBeep
SetRect
GetDlgItem
SetWindowsHookExA
LoadAcceleratorsA
CallNextHookEx
GetForegroundWindow
FindWindowA
SetForegroundWindow
ShowWindow
GetMessageA
IsIconic
DeleteMenu
GetClassInfoA
SystemParametersInfoA
PtInRect
CloseClipboard
DrawFocusRect
MessageBoxA
PostMessageA
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
IsDialogMessageA
IsWindow
TrackPopupMenuEx
gdi32
SelectClipRgn
RectVisible
SetBkColor
IntersectClipRect
CreateFontIndirectA
SetBrushOrgEx
GetClipBox
LPtoDP
CreateHalftonePalette
RealizePalette
SelectPalette
GetTextMetricsA
Polygon
TranslateCharsetInfo
UnrealizeObject
CreateBitmap
EndDoc
EndPage
SetTextJustification
SetViewportExtEx
SetWindowExtEx
CreatePatternBrush
StartDocA
GetDIBits
Ellipse
StretchDIBits
SetStretchBltMode
CreateDCA
CreateCompatibleBitmap
CreateDIBSection
CreateCompatibleDC
GetObjectA
BitBlt
DeleteDC
SetTextColor
GetStockObject
CreatePen
CreateSolidBrush
GetDeviceCaps
CreateFontA
SelectObject
MoveToEx
LineTo
SetBkMode
DPtoLP
GetMapMode
SetMapMode
StretchBlt
PatBlt
GetTextExtentPointA
CreateRectRgn
CombineRgn
GetRgnBox
FillRgn
StartPage
CreateBrushIndirect
DeleteObject
TextOutA
Rectangle
GetTextExtentPoint32A
comdlg32
GetOpenFileNameA
GetSaveFileNameA
PrintDlgA
advapi32
RegConnectRegistryA
RegSetValueExA
RegDeleteValueA
RegQueryValueExA
RegEnumValueA
RegOpenKeyExA
RegCreateKeyExA
GetUserNameA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
InitiateSystemShutdownA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
DeleteService
RegOpenKeyA
RegEnumKeyExA
RegDeleteKeyA
RegSetKeySecurity
RegGetKeySecurity
GetTokenInformation
GetSecurityInfo
SetEntriesInAclA
SetSecurityInfo
RegCloseKey
shell32
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetMalloc
FindExecutableA
ShellExecuteA
SHGetSpecialFolderLocation
ole32
CoInitialize
CoGetClassObject
OleInitialize
CoUninitialize
CoTaskMemFree
OleSetContainedObject
CoTaskMemAlloc
CoUnmarshalInterface
CreateStreamOnHGlobal
CoCreateInstance
CoMarshalInterface
CoReleaseMarshalData
OleUninitialize
StringFromCLSID
oleaut32
SafeArrayAccessData
SafeArrayCreateVector
SysAllocStringLen
VariantTimeToSystemTime
VarDateFromStr
SafeArrayPutElement
SafeArrayUnaccessData
SafeArrayCreate
DispGetParam
SafeArrayDestroy
VariantClear
SysAllocString
SysFreeString
VariantInit
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 536KB - Virtual size: 534KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3.9MB - Virtual size: 3.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ