Static task
static1
Behavioral task
behavioral1
Sample
0c4df75c791a0a51125577ce7fa93fd6_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
0c4df75c791a0a51125577ce7fa93fd6_JaffaCakes118.exe
Resource
win10v2004-20240910-en
General
-
Target
0c4df75c791a0a51125577ce7fa93fd6_JaffaCakes118
-
Size
580KB
-
MD5
0c4df75c791a0a51125577ce7fa93fd6
-
SHA1
a740683523c862db309ac4d5caba4c9f3f25c598
-
SHA256
bc91778f4e727324f5c63aa8ab2ada25f5892ce8d890da2f55c5e0a18c7f2b1a
-
SHA512
718d9d86f952353a97f378a1cb8f10e52d08ec4800ef2bd849a5261875ed5a170dee8be59efa2836b0cfaf40398b07803ac143aefb7a1b3bcb7462399e2013f7
-
SSDEEP
12288:3yp+nN0lfNYFCMkYjdrFgem9pnFgOTrDui348F:CpNmtF2XndTrKkF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c4df75c791a0a51125577ce7fa93fd6_JaffaCakes118
Files
-
0c4df75c791a0a51125577ce7fa93fd6_JaffaCakes118.exe windows:4 windows x86 arch:x86
58a3b7089130dc890dc101ec59fbb1b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
shlwapi
PathIsUNCA
PathFileExistsA
SHGetValueA
PathStripToRootA
PathFindExtensionA
PathFindFileNameA
PathRemoveExtensionA
advapi32
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
SetSecurityDescriptorDacl
RegOpenKeyA
RegDeleteKeyA
kernel32
FindClose
FindFirstFileA
GetFullPathNameA
GlobalGetAtomNameA
InterlockedIncrement
InterlockedDecrement
GetVersionExA
lstrcmpW
GlobalFindAtomA
GetModuleFileNameW
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
TlsGetValue
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
WritePrivateProfileStringA
GetCurrentDirectoryA
GlobalFlags
SetErrorMode
GetFileAttributesA
GetFileTime
GetCPInfo
GetOEMCP
GetSystemTimeAsFileTime
HeapFree
DuplicateHandle
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
WriteConsoleW
GetFileType
GetStdHandle
RtlUnwind
ExitThread
CreateThread
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
GetConsoleCP
GetConsoleMode
Sleep
GetACP
GetTimeZoneInformation
LCMapStringA
LCMapStringW
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
DebugBreak
GetDriveTypeA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA
GetThreadLocale
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
DeleteFileA
ReleaseSemaphore
CreateSemaphoreA
GetCurrentProcessId
GlobalAddAtomA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GlobalDeleteAtom
GetModuleHandleA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
MulDiv
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
RaiseException
LocalAlloc
SetFilePointer
WriteFile
ReadFile
CreateFileA
FreeResource
LocalFree
GetCurrentProcess
SetPriorityClass
DeviceIoControl
CreateMutexA
GetCurrentThreadId
SetLastError
GetVolumeInformationA
CopyFileA
GetTempFileNameA
GetModuleFileNameA
ExitProcess
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FreeLibrary
GetVersion
CompareStringA
lstrcmpiA
InterlockedExchange
MultiByteToWideChar
CompareStringW
lstrlenA
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetFileTime
CloseHandle
SystemTimeToFileTime
CompareFileTime
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetProcAddress
LoadLibraryA
GetTempPathA
GetLastError
HeapAlloc
CreateDirectoryA
user32
GrayStringA
BeginPaint
EndPaint
DestroyMenu
UnregisterClassA
GetSysColorBrush
ShowWindow
IsDialogMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetFocus
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
DrawTextExA
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
GetLastActivePopup
MessageBoxA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
PostQuitMessage
GetMenuState
GetMenuItemID
DrawTextA
TabbedTextOutA
GetMenuItemCount
GetSubMenu
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
SendMessageA
GetKeyState
PeekMessageA
ValidateRect
wsprintfA
GetParent
GetClassNameA
GetSystemMetrics
SendMessageTimeoutA
EnumChildWindows
EnumThreadWindows
WaitForInputIdle
BringWindowToTop
GetWindowThreadProcessId
SetWindowTextA
GetClientRect
EnableWindow
SetTimer
SetParent
PostMessageA
RegisterWindowMessageA
EnumWindows
GetWindowTextA
GetCursorPos
CharUpperA
ClientToScreen
LoadCursorA
GetDC
CopyRect
ReleaseDC
SetCursor
gdi32
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
SelectObject
GetStockObject
ExtTextOutA
GetClipBox
CreateBitmap
GetDeviceCaps
TextOutA
RectVisible
PtVisible
SetMapMode
RestoreDC
SaveDC
DeleteObject
GetObjectA
SetBkColor
SetTextColor
Escape
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
ole32
OleRun
CoInitialize
CoCreateInstance
CoGetMalloc
CoUninitialize
CoInitializeEx
CoDisconnectObject
oleaut32
LoadTypeLi
VariantClear
SysFreeString
SysAllocString
SysAllocStringLen
VariantInit
VariantCopy
GetErrorInfo
VariantChangeType
SysStringLen
SysAllocStringByteLen
Sections
.text Size: 460KB - Virtual size: 459KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 616B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ