Static task
static1
Behavioral task
behavioral1
Sample
f64704ed25f4c728af996eee3ee85411_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f64704ed25f4c728af996eee3ee85411_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
f64704ed25f4c728af996eee3ee85411_JaffaCakes118
-
Size
3.0MB
-
MD5
f64704ed25f4c728af996eee3ee85411
-
SHA1
86e3276b03f9b92b47d441bcfbb913c6c4263bfe
-
SHA256
73aae05fab96290cabbe4b0ec561d2f6d79da71834509c4b1f4b9ae714159b42
-
SHA512
4b9dc3fa89214829f6f92a13cb2e24fb980276a3c8a8b2b26dfd68273e8ba0d486423f1651c30bf739fb0527564f53bf23ed3c5d5665a52bf674f3104711f433
-
SSDEEP
49152:ybYn4gpT4fxx+mVA4PlYMq3tIp/SUd46zg89L7IPbTk:yURTpmVnPlAaunPk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f64704ed25f4c728af996eee3ee85411_JaffaCakes118
Files
-
f64704ed25f4c728af996eee3ee85411_JaffaCakes118.exe windows:5 windows x86 arch:x86
17e2d845a4a591914df117cadfcaa45a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
ImageList_Create
ImageList_Add
setupapi
SetupDiOpenClassRegKey
SetupOpenInfFileA
SetupInstallFromInfSectionA
SetupCloseInfFile
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
SystemTimeToFileTime
GetSystemTime
VirtualLock
VirtualAlloc
VirtualProtect
VirtualFree
IsBadReadPtr
HeapFree
GetProcessHeap
HeapAlloc
GetVersionExA
GetComputerNameW
GetVolumeInformationA
FindNextFileW
FindFirstFileW
GetDriveTypeW
GetLogicalDriveStringsW
CopyFileA
GetDriveTypeA
GetShortPathNameA
GetVolumePathNameA
FindNextVolumeW
QueryDosDeviceW
FindFirstVolumeW
WriteFile
LocalFree
VirtualUnlock
DefineDosDeviceA
GetCurrentProcessId
FormatMessageW
VirtualQuery
ReleaseMutex
OpenMutexA
GetVolumeInformationW
QueryPerformanceCounter
QueryPerformanceFrequency
FlushFileBuffers
GetFileSize
GetVolumeNameForVolumeMountPointA
GetModuleHandleA
GetCurrentDirectoryA
LockResource
SizeofResource
LoadResource
FindResourceA
GetFileAttributesA
SetFilePointer
GetModuleFileNameW
SetCurrentDirectoryA
GetDiskFreeSpaceA
UnhandledExceptionFilter
GetFileInformationByHandle
GetCurrentThread
SetUnhandledExceptionFilter
SetErrorMode
InterlockedExchangeAdd
InterlockedExchange
SetEvent
ResetEvent
CreateEventA
GetFileAttributesExA
DeleteCriticalSection
GetStartupInfoA
SetVolumeMountPointA
GetProcessTimes
GetThreadTimes
GlobalMemoryStatus
SleepEx
VerifyVersionInfoA
VerSetConditionMask
FormatMessageA
PeekNamedPipe
WaitForMultipleObjects
GetFileType
GetStdHandle
ExpandEnvironmentStringsA
GetVersion
FlushConsoleInputBuffer
GetCurrentProcess
DeleteVolumeMountPointA
InitializeCriticalSection
CreateThread
EnterCriticalSection
GetConsoleCP
GetConsoleMode
HeapReAlloc
GetFileAttributesW
GetSystemTimeAsFileTime
SetStdHandle
ExitThread
ResumeThread
FileTimeToSystemTime
FileTimeToLocalFileTime
DebugBreak
GetTimeZoneInformation
SetConsoleCtrlHandler
ReadConsoleInputA
SetConsoleMode
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
HeapCreate
HeapSize
InitializeCriticalSectionAndSpinCount
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetFullPathNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetEndOfFile
GetLocaleInfoA
GetStringTypeA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
CompareStringA
ExitProcess
CompareStringW
LeaveCriticalSection
GetTempPathA
GetTempFileNameA
CopyFileW
GetWindowsDirectoryA
WaitForSingleObject
GetExitCodeProcess
CreatePipe
SetHandleInformation
GetSystemInfo
FindFirstFileA
LoadLibraryA
GetProcAddress
FreeLibrary
FindNextFileA
FindClose
SetFilePointerEx
CreateFileA
GetFileSizeEx
GetFileTime
ReadFile
SetFileTime
GetLogicalDrives
MoveFileA
SetLastError
CreateFileW
GetCommandLineA
GetCommandLineW
GetTickCount
CreateMutexA
Sleep
GetSystemDirectoryA
CreateDirectoryA
GetModuleFileNameA
CreateProcessA
CloseHandle
SetProcessShutdownParameters
GetCurrentThreadId
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
InterlockedIncrement
GetLastError
InterlockedDecrement
DeviceIoControl
FindFirstVolumeA
QueryDosDeviceA
FindNextVolumeA
FindVolumeClose
DeleteFileA
SetEnvironmentVariableA
GetStringTypeExA
InterlockedCompareExchange
TerminateProcess
IsDebuggerPresent
RaiseException
RtlUnwind
GetModuleHandleW
GetProcessWorkingSetSize
user32
GetKeyState
EnumChildWindows
GetDlgCtrlID
GetClassNameA
LoadCursorA
SetCursor
DefDlgProcA
UnregisterClassA
LoadIconA
RegisterClassA
GetUpdateRect
BeginPaint
DefWindowProcA
GetDialogBaseUnits
EndPaint
PeekMessageA
DestroyWindow
GetSystemMetrics
GetWindowInfo
MoveWindow
GetDC
ReleaseDC
MessageBoxA
GetActiveWindow
GetMessagePos
EnumWindows
RegisterWindowMessageA
IsWindowEnabled
SystemParametersInfoA
DrawMenuBar
PostMessageA
GetCursorPos
SetLayeredWindowAttributes
CreateWindowExA
RegisterClassExA
TrackMouseEvent
GetSystemMenu
SystemParametersInfoW
SendMessageTimeoutA
wsprintfA
DrawTextA
GetClassInfoA
UnhookWindowsHookEx
CallNextHookEx
GetCaretPos
GetQueueStatus
GetProcessWindowStation
GetOpenClipboardWindow
GetWindowTextW
SetMenuItemInfoW
GetSubMenu
LoadBitmapA
FlashWindowEx
GetDlgItemInt
CreatePopupMenu
TrackPopupMenu
GetMessageTime
GetInputState
GetFocus
GetDesktopWindow
GetClipboardViewer
DestroyMenu
SetDlgItemInt
GetMenu
EnableMenuItem
SetWindowLongA
GetWindowLongA
CallWindowProcA
GetWindowRect
SetForegroundWindow
LoadImageA
GetDlgItemTextA
SetDlgItemTextA
SendDlgItemMessageA
SetFocus
SendDlgItemMessageW
GetKeyboardLayout
LoadKeyboardLayoutA
MessageBoxW
GetWindowTextA
SetWindowTextA
GetWindowTextLengthA
GetMessageA
TranslateMessage
DispatchMessageA
PostThreadMessageA
GetParent
SetTimer
GetWindowTextLengthW
KillTimer
GetAsyncKeyState
RegisterHotKey
UnregisterHotKey
wsprintfW
DialogBoxParamW
ShowWindow
SetWindowTextW
GetClientRect
SetWindowPos
InvalidateRect
SendMessageW
EndDialog
SendMessageA
DeleteMenu
AppendMenuA
AppendMenuW
GetDlgItemTextW
IsDlgButtonChecked
SetDlgItemTextW
CheckDlgButton
GetDlgItem
EnableWindow
LoadStringA
GetClipboardOwner
GetCapture
SetWindowsHookExA
GetUserObjectInformationW
MessageBeep
gdi32
CreateFontIndirectW
GetStockObject
CreatePen
MoveToEx
LineTo
GetCurrentObject
GetObjectA
SetStretchBltMode
StretchBlt
DeleteDC
BitBlt
CreateCompatibleDC
SetMapMode
GetDeviceCaps
SelectObject
GetTextExtentPoint32W
GetTextMetricsA
CreateCompatibleBitmap
DeleteObject
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
StartServiceCtrlDispatcherA
RegEnumValueA
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
CryptAcquireContextA
CryptGenRandom
CryptReleaseContext
RegEnumKeyExA
GetTokenInformation
IsWellKnownSid
QueryServiceStatus
ControlService
StartServiceA
OpenProcessToken
RegOpenKeyExA
ChangeServiceConfigA
OpenSCManagerA
CreateServiceA
ChangeServiceConfig2A
OpenServiceA
DeleteService
CloseServiceHandle
GetUserNameW
SetServiceStatus
DeregisterEventSource
ReportEventA
RegisterEventSourceA
RegisterServiceCtrlHandlerA
RegCloseKey
RegCreateKeyExA
shell32
ShellExecuteW
ord680
SHGetFileInfoA
SHGetMalloc
SHBrowseForFolderW
SHGetPathFromIDListA
ShellExecuteExA
CommandLineToArgvW
SHGetSpecialFolderPathA
ShellExecuteA
SHChangeNotify
SHGetFolderPathA
DragAcceptFiles
DragQueryFileA
DragFinish
Shell_NotifyIconA
Shell_NotifyIconW
ole32
CoUninitialize
CoRegisterClassObject
CoRevokeClassObject
CoGetObject
StringFromGUID2
CoCreateInstance
CoInitialize
oleaut32
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
SysFreeString
ws2_32
listen
recvfrom
sendto
getaddrinfo
freeaddrinfo
socket
closesocket
accept
bind
WSAIoctl
connect
setsockopt
getsockopt
ntohs
getpeername
getsockname
select
__WSAFDIsSet
WSASetLastError
recv
send
WSAGetLastError
WSAStartup
WSACleanup
shutdown
gethostname
ioctlsocket
htons
wldap32
ord50
ord26
ord27
ord30
ord32
ord60
ord35
ord79
ord200
ord301
ord41
ord46
ord143
ord211
ord22
ord33
crypt32
CryptStringToBinaryA
CryptBinaryToStringA
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 399KB - Virtual size: 399KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 97KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 855KB - Virtual size: 855KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ