Static task
static1
Behavioral task
behavioral1
Sample
eb48588e3249bc93b4056ef30badef16_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
eb48588e3249bc93b4056ef30badef16_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
eb48588e3249bc93b4056ef30badef16_JaffaCakes118
-
Size
332KB
-
MD5
eb48588e3249bc93b4056ef30badef16
-
SHA1
176b32474a62bcddf4c0481166436195775f312e
-
SHA256
385c246602c7764dd1fe7759b9b34f288d04a6e7cbdfb5d3fb7afaf23054daf1
-
SHA512
56f8450f461a5770cd80cbb909e364fc8d94b571b1997a0244d90eebc992ca8fdfe0a3b72084dc94f569e2e60e831a900e093314d90a92c6999e216ded0465a9
-
SSDEEP
6144:Kotdbd9Q0UuKDcJIsnXzBV/W707s9XT2WS6u6ezG+Q6SxafXeOgMgK:KoLbdK7uKDoIGP/W7sBN1649/PeEgK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource eb48588e3249bc93b4056ef30badef16_JaffaCakes118
Files
-
eb48588e3249bc93b4056ef30badef16_JaffaCakes118.exe windows:5 windows x86 arch:x86
61297aa0130bf6af65806d37aebead43
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlUshortByteSwap
NtAllocateVirtualMemory
LdrGetDllHandle
psapi
GetProcessImageFileNameW
kernel32
DebugBreak
MultiByteToWideChar
WaitForMultipleObjects
GetVersionExW
FindNextFileW
GlobalAddAtomW
GetPrivateProfileStringA
UnlockFileEx
Process32FirstW
LocalFree
GetNumberFormatW
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcess
GetFileSize
CreateMutexA
LoadLibraryExW
SuspendThread
LocalAlloc
SetFileAttributesW
ReadFile
GetCurrentThread
LockFileEx
GetVersionExA
ExpandEnvironmentStringsW
GetModuleHandleA
SizeofResource
OutputDebugStringA
SetProcessShutdownParameters
CreateFileMappingW
GetThreadPriority
HeapAlloc
LoadResource
GetSystemDirectoryW
UnmapViewOfFile
GetModuleFileNameA
WritePrivateProfileStringW
GetTimeFormatW
InterlockedIncrement
lstrcmpA
WaitForSingleObjectEx
Process32NextW
GlobalFree
GetCPInfo
SetCurrentDirectoryA
CreateToolhelp32Snapshot
MoveFileW
GetThreadLocale
InitializeCriticalSectionAndSpinCount
CompareStringW
GetTempPathW
GetTempFileNameW
SetEndOfFile
GetFileAttributesA
GetLogicalDriveStringsW
FreeLibrary
InterlockedExchange
IsWow64Process
CloseHandle
GetProcAddress
CreateDirectoryA
InitializeCriticalSection
GetFileSizeEx
GetProcessHeap
GetSystemWow64DirectoryW
GetSystemTime
CreateFileA
GetTickCount
GlobalUnlock
SetThreadPriority
DisableThreadLibraryCalls
GetLocaleInfoW
GlobalLock
GetUserDefaultLCID
FindResourceW
GetCurrentDirectoryW
ReleaseSemaphore
SearchPathW
UnhandledExceptionFilter
SetLastError
GetModuleHandleW
GlobalAddAtomA
GlobalReAlloc
RemoveDirectoryW
VirtualProtect
GetLastError
CreateTimerQueueTimer
ActivateActCtx
VirtualFree
FindAtomW
CreateProcessW
lstrlenW
LoadLibraryW
CompareStringA
SetFileTime
SetFilePointer
TlsGetValue
TlsAlloc
GetDateFormatW
QueryDosDeviceW
GetCurrentProcessId
DuplicateHandle
GetACP
SetEvent
SetErrorMode
FreeLibraryAndExitThread
DeleteAtom
GetSystemDirectoryA
MoveFileExW
GetSystemInfo
GetFileInformationByHandle
CreateEventW
GetFullPathNameW
GetModuleHandleExA
HeapCreate
CopyFileW
FlushInstructionCache
GetShortPathNameW
SetProcessWorkingSetSize
GetThreadContext
lstrcmpiW
FindResourceExW
FormatMessageW
WideCharToMultiByte
GetFileAttributesW
SetThreadExecutionState
GetLocalTime
OpenEventW
TerminateThread
ReleaseActCtx
EnumUILanguagesW
MapViewOfFile
GetLongPathNameW
TlsFree
ReleaseMutex
CreateEventA
SetCurrentDirectoryW
CreateSemaphoreW
VirtualQuery
GetAtomNameW
CreateMutexW
HeapFree
GetEnvironmentVariableW
ExpandEnvironmentStringsA
LocalFileTimeToFileTime
LocalReAlloc
RaiseException
SetFilePointerEx
OpenMutexA
HeapReAlloc
GetModuleFileNameW
Sleep
GlobalSize
SetUnhandledExceptionFilter
CreateFileW
AddAtomW
WritePrivateProfileSectionW
VirtualAlloc
MulDiv
HeapDestroy
lstrlenA
QueryPerformanceCounter
lstrcmpiA
CreateFileMappingA
LockResource
GetCurrentThreadId
GetSystemDefaultLCID
ResetEvent
OpenProcess
SystemTimeToFileTime
GlobalFlags
SetEnvironmentVariableW
GetModuleHandleExW
GetPrivateProfileSectionNamesW
SetThreadContext
GlobalAlloc
DeleteCriticalSection
TerminateProcess
FindFirstFileW
CreateActCtxW
GetSystemTimeAsFileTime
QueueUserWorkItem
ResumeThread
DeleteFileW
CreateDirectoryW
LocalSize
GetUserDefaultUILanguage
DeleteTimerQueueTimer
TlsSetValue
TryEnterCriticalSection
GetWindowsDirectoryW
WriteFile
GetVersion
CompareFileTime
GetSystemDefaultUILanguage
FindClose
ExitProcess
GlobalDeleteAtom
FileTimeToSystemTime
LoadLibraryA
CreateThread
LCMapStringW
FileTimeToLocalFileTime
GetFileAttributesExW
GetPrivateProfileSectionW
GetExitCodeThread
ReplaceFileW
lstrcmpW
WaitForSingleObject
OpenMutexW
IsDBCSLeadByte
InterlockedCompareExchange
GetPrivateProfileStringW
DeactivateActCtx
InterlockedDecrement
QueryPerformanceFrequency
gdi32
CreateEnhMetaFileA
GetStockObject
SelectObject
CreateHalftonePalette
SetDCPenColor
SetMapMode
GetTextAlign
GetTextExtentPoint32A
GetObjectW
GetPixel
RealizePalette
CreateDCW
GetDeviceCaps
DeleteDC
SaveDC
GetBrushOrgEx
ExtTextOutW
OffsetWindowOrgEx
RectVisible
EqualRgn
StretchDIBits
CreateFontW
CombineRgn
SetTextAlign
CreatePen
PlayEnhMetaFile
TextOutW
MoveToEx
CloseMetaFile
GetRgnBox
GetBkMode
RestoreDC
SetBrushOrgEx
SetStretchBltMode
CreateDIBPatternBrushPt
ExtCreateRegion
GetDIBits
SetViewportOrgEx
SetPaletteEntries
DeleteEnhMetaFile
GetPaletteEntries
GetGlyphIndicesW
LineTo
SetViewportExtEx
SetBkMode
SetBkColor
GetSystemPaletteEntries
Rectangle
GetClipBox
SetRectRgn
CreatePolygonRgn
StretchBlt
PatBlt
BitBlt
GetLayout
GetTextExtentPoint32W
GetDCOrgEx
DeleteObject
GetRegionData
IntersectClipRect
GetBkColor
GetTextMetricsW
GetTextColor
CreateFontIndirectW
GetTextExtentExPointI
TextOutA
CreateRectRgn
GetObjectA
SetLayout
CreateCompatibleDC
CreateBitmap
CreateFontIndirectA
SetWindowOrgEx
CreateMetaFileW
CreateRectRgnIndirect
CreateDCA
SetTextColor
CreateSolidBrush
GetTextCharset
GetTextExtentPointW
CreatePalette
LPtoDP
OffsetRgn
SetWindowExtEx
CreateCompatibleBitmap
CloseEnhMetaFile
CreatePatternBrush
CreateDIBSection
SelectPalette
advapi32
GetUserNameW
RegQueryValueExA
RegCreateKeyExA
IsTextUnicode
GetTraceEnableFlags
CryptAcquireContextW
RegDeleteKeyA
RegSetValueExW
RegCreateKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegEnumValueW
RegCloseKey
CryptReleaseContext
ConvertSidToStringSidW
RegEnumKeyW
RegDeleteKeyW
ConvertStringSidToSidW
CryptCreateHash
RegQueryValueExW
RegCreateKeyA
GetTraceEnableLevel
RegOpenKeyExA
TraceEvent
CryptHashData
RegDeleteValueW
RegOpenKeyW
GetTokenInformation
RegEnumKeyExW
CryptGetHashParam
ImpersonateSelf
RegQueryInfoKeyW
SetTokenInformation
RegOpenKeyExW
RegQueryValueW
RegEnumValueA
GetLengthSid
OpenProcessToken
CreateProcessAsUserW
OpenThreadToken
CryptDestroyHash
DuplicateTokenEx
SetThreadToken
RegOpenCurrentUser
TraceMessage
RegSetValueExA
UnregisterTraceGuids
RegisterTraceGuidsW
RegDeleteValueA
GetTraceLoggerHandle
user32
MapDialogRect
LoadAcceleratorsW
SetDlgItemInt
LoadCursorW
GetWindowLongA
CallWindowProcW
EndPaint
EqualRect
GetCursor
SetPropA
GetSysColorBrush
ShowScrollBar
GetClipboardData
SetWindowsHookExW
PeekMessageA
RegisterWindowMessageW
EnumWindows
GetScrollInfo
GetClassNameW
GetMenuStringW
GetWindow
SetWindowPos
GetClientRect
GetDesktopWindow
GetAncestor
CharNextA
MessageBoxExW
InvalidateRect
DdeFreeDataHandle
CharLowerBuffW
DrawEdge
DestroyWindow
CallNextHookEx
GetWindowTextLengthW
CopyImage
GetTopWindow
GetLastInputInfo
CheckMenuItem
HideCaret
GetPropW
SetWindowLongW
GetDC
IsMenu
GetWindowInfo
GetCursorPos
SetCapture
DestroyAcceleratorTable
ReleaseDC
DdeInitializeW
FindWindowA
RegisterClipboardFormatA
GetWindowPlacement
AnimateWindow
GetAsyncKeyState
EndMenu
DrawTextW
SendMessageA
CharLowerW
MonitorFromRect
DdeGetData
DispatchMessageA
SendMessageW
CheckMenuRadioItem
MoveWindow
GetMessageW
IsDialogMessageW
GetProcessWindowStation
AdjustWindowRect
GetMenuItemID
IsDlgButtonChecked
SetDlgItemTextW
RegisterClassW
TrackMouseEvent
DdeCreateStringHandleW
DestroyMenu
KillTimer
DdeClientTransaction
DialogBoxParamW
DrawIconEx
LoadIconW
IsCharAlphaNumericW
DefWindowProcA
GetWindowRect
WaitMessage
GetSubMenu
RegisterWindowMessageA
SetWindowLongA
GetMenuItemInfoA
AppendMenuW
SetWindowPlacement
MessageBeep
InflateRect
GetMenuItemInfoW
WaitForInputIdle
GetDlgItem
EnumChildWindows
MapWindowPoints
DdeUninitialize
SetRectEmpty
IsChild
DdeFreeStringHandle
DrawTextExW
GetWindowRgnBox
TranslateAcceleratorW
DrawFrameControl
GetClipboardFormatNameW
TrackPopupMenuEx
EnumThreadWindows
TranslateMessage
wsprintfW
IsWindowVisible
GetNextDlgTabItem
CheckDlgButton
LoadStringW
GetKeyNameTextW
GetMenuItemCount
IsWindowUnicode
CloseClipboard
AllowSetForegroundWindow
SendMessageTimeoutW
GetKeyboardLayout
GetWindowDC
EmptyClipboard
GetMenuState
GetWindowTextW
PostMessageA
FindWindowW
UpdateWindow
DialogBoxParamA
EnumDisplaySettingsW
IsRectEmpty
CharPrevA
PostThreadMessageA
EndDeferWindowPos
OpenClipboard
GetIconInfo
GetFocus
MessageBoxIndirectA
MonitorFromPoint
SendNotifyMessageW
MapVirtualKeyW
CheckRadioButton
LoadCursorA
GetClassInfoExW
GetLastActivePopup
PostThreadMessageW
IsWindowEnabled
LoadBitmapW
GetDialogBaseUnits
PostQuitMessage
CreateMenu
GetClassLongW
SendDlgItemMessageW
UpdateLayeredWindow
GetComboBoxInfo
SetActiveWindow
SetParent
SetClipboardViewer
SetWindowTextW
GetMessageA
RemoveMenu
DialogBoxIndirectParamA
DdeDisconnect
PostMessageW
TrackPopupMenu
UnhookWindowsHookEx
GetDlgItemTextW
LockSetForegroundWindow
CopyRect
InsertMenuW
IsWindow
CallMsgFilterW
GetClassInfoW
DestroyIcon
GetMessageTime
WinHelpW
ChildWindowFromPoint
SetMenu
GetSysColor
IntersectRect
SetClipboardData
GetClassWord
CopyIcon
GetSystemMetrics
GetMonitorInfoW
PtInRect
MonitorFromWindow
DialogBoxIndirectParamW
CreateDialogParamW
GetForegroundWindow
SetTimer
FillRect
SystemParametersInfoA
CreateIconIndirect
SendMessageTimeoutA
SetForegroundWindow
WindowFromPoint
LoadMenuW
ShowCaret
GetWindowThreadProcessId
DdeNameService
LoadImageW
GetDlgCtrlID
DdeQueryStringW
CreateWindowExW
MsgWaitForMultipleObjectsEx
GetMenuDefaultItem
AttachThreadInput
RedrawWindow
GetDoubleClickTime
RemovePropA
PeekMessageW
SetScrollInfo
ClientToScreen
DdeConnect
SetCursorPos
EnumDesktopWindows
VkKeyScanExW
GetCapture
CharUpperW
GetWindowLongW
GetKeyState
SetFocus
GetSystemMenu
SystemParametersInfoW
SetCursor
BeginPaint
AdjustWindowRectEx
SetScrollPos
SetMenuDefaultItem
SetPropW
SetWindowRgn
CharPrevW
RemovePropW
GetParent
EnableMenuItem
ReleaseCapture
EndDialog
UnionRect
SetRect
NotifyWinEvent
DrawFocusRect
LoadStringA
IsHungAppWindow
CharNextW
GetPropA
MessageBoxExA
SetMenuItemInfoW
DeleteMenu
ShowWindow
ShowOwnedPopups
MsgWaitForMultipleObjects
DdeCreateDataHandle
RegisterClipboardFormatW
DefWindowProcW
DeferWindowPos
RegisterClassExW
EnableWindow
FindWindowExW
SetMenuItemBitmaps
BeginDeferWindowPos
MessageBoxW
ChangeClipboardChain
OffsetRect
MessageBoxIndirectW
GetShellWindow
CreatePopupMenu
ScreenToClient
GetActiveWindow
IsIconic
DispatchMessageW
InsertMenuItemW
UnregisterClassW
GetMessagePos
shell32
SHGetFolderPathAndSubDirW
ExtractIconExW
SHGetPathFromIDListW
SHGetDesktopFolder
ShellExecuteExW
ExtractIconW
DragQueryFileW
SHGetFileInfoW
ShellExecuteA
SHBindToParent
ShellExecuteW
SHAppBarMessage
SHGetDataFromIDListW
SHGetPathFromIDListA
Shell_NotifyIconA
SHGetFolderPathW
SHChangeNotify
ExtractAssociatedIconExW
SHGetFolderLocation
SHBrowseForFolderW
SHFileOperationW
SHCreateShellItem
SHPathPrepareForWriteW
SHSetLocalizedName
Shell_NotifyIconW
SHGetSpecialFolderLocation
ShellAboutW
SHGetInstanceExplorer
SHGetSpecialFolderPathW
uxtheme
GetThemeColor
CloseThemeData
GetThemeAppProperties
SetWindowTheme
GetThemeMetric
IsThemeActive
IsAppThemed
OpenThemeData
GetThemeFont
GetThemeBackgroundExtent
DrawThemeBackground
GetThemeMargins
GetThemeBackgroundContentRect
GetThemePartSize
DrawThemeParentBackground
Sections
.text Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE