Static task
static1
Behavioral task
behavioral1
Sample
ec000c3ea2d185058380c6d9e4b3fdeb_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ec000c3ea2d185058380c6d9e4b3fdeb_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ec000c3ea2d185058380c6d9e4b3fdeb_JaffaCakes118
-
Size
332KB
-
MD5
ec000c3ea2d185058380c6d9e4b3fdeb
-
SHA1
87e4a084f5fba422aa333852f505ad9935f8a93a
-
SHA256
98c3fbc5dcc2af30bd55461d814af8ae8f8a8b4004947fa30ec32c4fd757f6a8
-
SHA512
d15c6b29a4a2512843c744977f6ccdda882bc97622cdd99331147392f0b2426c16eb84473e6d439cfdbb00365fb0d9851f45dae3d1533e5d906eb39d95fa8145
-
SSDEEP
6144:GOx7LCSMFgLCeHUlOzO3HaFeA9wV4eSEMgf/xig7kZ0TQSdQTC8aZ:BExgLkloadWwVYvg7vcuQ1
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ec000c3ea2d185058380c6d9e4b3fdeb_JaffaCakes118
Files
-
ec000c3ea2d185058380c6d9e4b3fdeb_JaffaCakes118.exe windows:5 windows x86 arch:x86
a93e0c86c1757013a455cf7a5f747a03
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetInstanceExplorer
SHBrowseForFolderW
SHGetSpecialFolderLocation
SHGetDesktopFolder
ExtractIconW
Shell_NotifyIconA
SHGetDataFromIDListW
ShellExecuteExW
SHPathPrepareForWriteW
SHGetSpecialFolderPathW
Shell_NotifyIconW
SHFileOperationW
ShellExecuteA
SHSetLocalizedName
SHGetFolderLocation
ExtractAssociatedIconExW
ShellAboutW
ShellExecuteW
SHCreateShellItem
ExtractIconExW
SHAppBarMessage
SHGetPathFromIDListW
DragQueryFileW
SHGetFolderPathAndSubDirW
SHGetFileInfoW
SHGetPathFromIDListA
SHChangeNotify
SHBindToParent
SHGetFolderPathW
ntdll
RtlUshortByteSwap
LdrGetDllHandle
NtAllocateVirtualMemory
kernel32
QueueUserWorkItem
TlsSetValue
GetPrivateProfileStringA
GlobalAddAtomW
DeactivateActCtx
VirtualProtect
CreateToolhelp32Snapshot
WritePrivateProfileSectionW
OpenProcess
ReplaceFileW
VirtualFree
SetCurrentDirectoryW
SetFilePointerEx
EnumUILanguagesW
InterlockedDecrement
GetLongPathNameW
GetSystemInfo
TerminateProcess
TlsFree
GlobalSize
MoveFileExW
GetModuleHandleW
SetLastError
Process32FirstW
TlsAlloc
DisableThreadLibraryCalls
GetVersionExA
GetSystemTimeAsFileTime
SearchPathW
GetCurrentThread
GetFileInformationByHandle
MulDiv
lstrlenA
SetFileTime
SystemTimeToFileTime
SuspendThread
GetCurrentProcessId
GetThreadLocale
WaitForMultipleObjects
LeaveCriticalSection
SizeofResource
HeapFree
OpenMutexW
GetUserDefaultUILanguage
GlobalFlags
GetFileSizeEx
RaiseException
GetWindowsDirectoryW
GetNumberFormatW
GetVersionExW
SetThreadPriority
GetSystemTime
FindResourceExW
IsDBCSLeadByte
CompareStringA
SetThreadExecutionState
GetSystemWow64DirectoryW
SetFilePointer
DeleteFileW
LoadLibraryA
CreateMutexA
QueryPerformanceCounter
GetThreadContext
GetSystemDirectoryW
LocalFileTimeToFileTime
GlobalFree
VirtualAlloc
FindFirstFileW
ExpandEnvironmentStringsA
VirtualQuery
GlobalLock
CreateEventA
GetExitCodeThread
HeapDestroy
CreateActCtxW
FormatMessageW
FindClose
DeleteCriticalSection
GlobalAlloc
DuplicateHandle
GetLocalTime
SetProcessWorkingSetSize
TryEnterCriticalSection
FlushInstructionCache
Sleep
WaitForSingleObjectEx
CompareFileTime
InterlockedIncrement
CreateSemaphoreW
GetCurrentThreadId
GetFileAttributesW
GetLastError
CreateTimerQueueTimer
SetEndOfFile
GetFullPathNameW
CreateEventW
GetDateFormatW
EnterCriticalSection
SetUnhandledExceptionFilter
lstrlenW
GlobalAddAtomA
OpenEventW
UnlockFileEx
GlobalReAlloc
lstrcmpiW
ReleaseMutex
ActivateActCtx
GetPrivateProfileSectionNamesW
ExpandEnvironmentStringsW
QueryDosDeviceW
GetProcessHeap
GetCurrentProcess
ExitProcess
ReleaseActCtx
WaitForSingleObject
DeleteAtom
CreateDirectoryW
lstrcmpiA
GetThreadPriority
LoadResource
LocalFree
GetModuleFileNameW
GetVersion
IsWow64Process
ResumeThread
GetFileSize
InterlockedCompareExchange
FileTimeToSystemTime
HeapAlloc
UnhandledExceptionFilter
GetModuleHandleA
SetFileAttributesW
GetTickCount
GetModuleHandleExA
CreateMutexW
WideCharToMultiByte
SetEnvironmentVariableW
HeapReAlloc
CreateFileW
LocalSize
LocalReAlloc
InitializeCriticalSectionAndSpinCount
GlobalDeleteAtom
GetAtomNameW
SetErrorMode
MapViewOfFile
GetCurrentDirectoryW
GetEnvironmentVariableW
CreateFileMappingW
FindResourceW
GetLogicalDriveStringsW
CreateFileA
CreateDirectoryA
CopyFileW
GetModuleHandleExW
AddAtomW
SetProcessShutdownParameters
GetShortPathNameW
GetTimeFormatW
MoveFileW
FindAtomW
GetLocaleInfoW
MultiByteToWideChar
GetSystemDirectoryA
FreeLibraryAndExitThread
GetTempFileNameW
ResetEvent
lstrcmpW
InterlockedExchange
TerminateThread
ReleaseSemaphore
OpenMutexA
LockFileEx
GetTempPathW
SetThreadContext
GetPrivateProfileStringW
GetFileAttributesA
LockResource
WriteFile
GetPrivateProfileSectionW
TlsGetValue
SetEvent
CreateFileMappingA
FindNextFileW
RemoveDirectoryW
UnmapViewOfFile
DebugBreak
CreateThread
LoadLibraryExW
GlobalUnlock
ReadFile
LocalAlloc
GetSystemDefaultUILanguage
CompareStringW
FreeLibrary
GetFileAttributesExW
HeapCreate
GetSystemDefaultLCID
SetCurrentDirectoryA
InitializeCriticalSection
CreateProcessW
lstrcmpA
GetModuleFileNameA
CloseHandle
WritePrivateProfileStringW
FileTimeToLocalFileTime
LCMapStringW
QueryPerformanceFrequency
DeleteTimerQueueTimer
Process32NextW
OutputDebugStringA
GetCPInfo
GetProcAddress
LoadLibraryW
GetACP
GetUserDefaultLCID
uxtheme
SetWindowTheme
GetThemePartSize
GetThemeBackgroundExtent
GetThemeMargins
GetThemeColor
OpenThemeData
GetThemeFont
GetThemeMetric
GetThemeAppProperties
IsAppThemed
DrawThemeBackground
DrawThemeParentBackground
GetThemeBackgroundContentRect
CloseThemeData
IsThemeActive
psapi
GetProcessImageFileNameW
gdi32
GetTextExtentPoint32W
SetBkColor
SaveDC
SelectObject
GetTextColor
StretchDIBits
OffsetWindowOrgEx
CreateHalftonePalette
SetTextColor
IntersectClipRect
GetRgnBox
DeleteDC
SetRectRgn
GetTextMetricsW
SetViewportExtEx
GetRegionData
GetObjectA
SelectPalette
GetBrushOrgEx
GetTextCharset
SetMapMode
TextOutA
StretchBlt
MoveToEx
CreateDIBPatternBrushPt
SetBkMode
ExtTextOutW
CreateRectRgn
GetClipBox
CreateFontW
SetWindowOrgEx
GetTextExtentPoint32A
CombineRgn
CreateCompatibleDC
LineTo
GetPaletteEntries
GetLayout
CreateDIBSection
GetDIBits
CloseMetaFile
CreateDCA
GetStockObject
SetStretchBltMode
CloseEnhMetaFile
DeleteEnhMetaFile
TextOutW
Rectangle
CreateDCW
CreatePolygonRgn
ExtCreateRegion
DeleteObject
GetDeviceCaps
PlayEnhMetaFile
CreateSolidBrush
CreateEnhMetaFileA
GetObjectW
GetBkColor
CreatePatternBrush
GetDCOrgEx
SetTextAlign
GetSystemPaletteEntries
GetGlyphIndicesW
OffsetRgn
PatBlt
RestoreDC
BitBlt
CreateFontIndirectA
CreateFontIndirectW
CreateCompatibleBitmap
EqualRgn
GetBkMode
SetViewportOrgEx
RealizePalette
LPtoDP
SetDCPenColor
GetPixel
RectVisible
GetTextExtentPointW
SetLayout
CreatePen
GetTextExtentExPointI
CreateMetaFileW
CreateRectRgnIndirect
SetWindowExtEx
CreatePalette
SetBrushOrgEx
SetPaletteEntries
GetTextAlign
CreateBitmap
advapi32
RegCloseKey
OpenThreadToken
SetTokenInformation
OpenProcessToken
RegCreateKeyExA
IsTextUnicode
TraceEvent
TraceMessage
RegSetValueExA
GetLengthSid
RegOpenCurrentUser
GetTraceEnableFlags
RegDeleteValueW
RegCreateKeyA
RegQueryValueExW
GetTraceEnableLevel
SetThreadToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegQueryValueW
CryptHashData
ConvertStringSidToSidW
ImpersonateSelf
CryptGetHashParam
CryptCreateHash
RegCreateKeyExW
RegSetValueExW
RegDeleteValueA
GetTokenInformation
RegQueryInfoKeyW
RegEnumValueW
GetUserNameW
CryptDestroyHash
RegEnumKeyW
RegOpenKeyExA
RegOpenKeyW
UnregisterTraceGuids
CreateProcessAsUserW
RegDeleteKeyA
RegEnumValueA
RegQueryValueExA
RegisterTraceGuidsW
CryptReleaseContext
GetTraceLoggerHandle
DuplicateTokenEx
RegEnumKeyExW
RegOpenKeyExW
CryptAcquireContextW
RegDeleteKeyW
ConvertSidToStringSidW
user32
GetWindowRgnBox
CharLowerBuffW
TrackMouseEvent
GetScrollInfo
GetWindowLongW
DrawIconEx
TrackPopupMenuEx
SendMessageTimeoutA
DdeDisconnect
MessageBoxIndirectA
GetClipboardData
SetClipboardData
CharLowerW
LoadImageW
GetMonitorInfoW
GetActiveWindow
WindowFromPoint
RemovePropW
DispatchMessageA
MessageBoxExW
WaitForInputIdle
AdjustWindowRect
MoveWindow
GetIconInfo
CheckRadioButton
SendMessageW
VkKeyScanExW
UnionRect
TrackPopupMenu
SetCursorPos
GetDlgItem
GetDoubleClickTime
EnumWindows
GetNextDlgTabItem
MessageBoxW
ChildWindowFromPoint
LoadBitmapW
CallWindowProcW
DdeClientTransaction
CreateWindowExW
SystemParametersInfoA
UnregisterClassW
LoadAcceleratorsW
CopyIcon
EndDeferWindowPos
ShowWindow
ReleaseDC
InsertMenuItemW
DdeFreeDataHandle
ClientToScreen
AllowSetForegroundWindow
CharNextA
PeekMessageW
IntersectRect
SetWindowTextW
DdeConnect
GetDC
GetDialogBaseUnits
CopyRect
DdeCreateDataHandle
IsDlgButtonChecked
UpdateWindow
EnableMenuItem
RemoveMenu
GetCapture
DefWindowProcA
SetTimer
GetWindowTextW
GetMessagePos
EnumDisplaySettingsW
EndDialog
MsgWaitForMultipleObjectsEx
DialogBoxParamA
DrawTextExW
CharNextW
MapDialogRect
LoadStringA
EndPaint
NotifyWinEvent
LoadIconW
IsWindowUnicode
GetSysColorBrush
CallMsgFilterW
wsprintfW
GetCursorPos
MapVirtualKeyW
SetWindowLongW
GetMenuDefaultItem
DdeFreeStringHandle
DestroyAcceleratorTable
KillTimer
AnimateWindow
PostMessageW
EnumThreadWindows
GetShellWindow
MonitorFromRect
SetWindowPos
SetCapture
GetWindow
PostMessageA
SetDlgItemTextW
IsRectEmpty
IsMenu
IsCharAlphaNumericW
RegisterClassW
DeferWindowPos
DialogBoxIndirectParamA
MessageBoxExA
GetParent
CharUpperW
IsHungAppWindow
SetWindowRgn
CreateIconIndirect
DispatchMessageW
DestroyIcon
GetMenuItemInfoA
GetClipboardFormatNameW
GetProcessWindowStation
SetPropA
SetMenuItemBitmaps
RegisterWindowMessageA
OpenClipboard
CheckMenuRadioItem
GetKeyNameTextW
ShowScrollBar
RegisterClassExW
CharPrevA
GetSubMenu
TranslateMessage
SetScrollInfo
MessageBoxIndirectW
DialogBoxIndirectParamW
GetClassInfoExW
CloseClipboard
PostQuitMessage
SetWindowsHookExW
SetCursor
ShowCaret
GetKeyboardLayout
GetWindowTextLengthW
UpdateLayeredWindow
LoadStringW
DdeQueryStringW
SetScrollPos
GetSystemMenu
MonitorFromWindow
IsWindowEnabled
GetKeyState
LockSetForegroundWindow
DdeCreateStringHandleW
CreateMenu
UnhookWindowsHookEx
BeginDeferWindowPos
RemovePropA
OffsetRect
MessageBeep
PtInRect
SendNotifyMessageW
DdeInitializeW
ChangeClipboardChain
SetParent
CheckMenuItem
EnableWindow
GetSystemMetrics
GetMenuStringW
SetDlgItemInt
IsWindowVisible
GetMenuItemID
ReleaseCapture
SendMessageTimeoutW
SendMessageA
GetMessageTime
GetDlgItemTextW
WaitMessage
SetWindowPlacement
GetClassWord
GetWindowLongA
HideCaret
SetMenu
EmptyClipboard
GetClientRect
RegisterClipboardFormatW
CreatePopupMenu
GetFocus
DrawFocusRect
SetWindowLongA
GetPropA
GetMenuState
GetWindowThreadProcessId
SetFocus
GetWindowRect
SetMenuDefaultItem
LoadCursorA
PostThreadMessageA
CharPrevW
GetForegroundWindow
GetDlgCtrlID
DrawFrameControl
InvalidateRect
DestroyMenu
CheckDlgButton
DrawTextW
IsWindow
SetActiveWindow
MonitorFromPoint
FillRect
GetWindowDC
SetMenuItemInfoW
GetClassNameW
GetMessageW
AdjustWindowRectEx
AppendMenuW
LoadMenuW
SetRectEmpty
GetPropW
FindWindowExW
DrawEdge
FindWindowW
PeekMessageA
EndMenu
GetLastActivePopup
GetClassInfoW
SetClipboardViewer
GetMenuItemInfoW
GetWindowInfo
TranslateAcceleratorW
CreateDialogParamW
SendDlgItemMessageW
InsertMenuW
GetDesktopWindow
RedrawWindow
SetRect
PostThreadMessageW
MapWindowPoints
InflateRect
DdeUninitialize
SetForegroundWindow
GetSysColor
EqualRect
GetAsyncKeyState
DdeNameService
CallNextHookEx
FindWindowA
MsgWaitForMultipleObjects
BeginPaint
GetMenuItemCount
GetMessageA
SetPropW
ShowOwnedPopups
GetClassLongW
IsIconic
DialogBoxParamW
AttachThreadInput
GetWindowPlacement
DefWindowProcW
RegisterClipboardFormatA
GetTopWindow
EnumDesktopWindows
GetLastInputInfo
DdeGetData
SystemParametersInfoW
WinHelpW
CopyImage
IsChild
RegisterWindowMessageW
GetComboBoxInfo
DeleteMenu
ScreenToClient
GetCursor
IsDialogMessageW
DestroyWindow
EnumChildWindows
GetAncestor
LoadCursorW
Sections
.text Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 37KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE