Static task
static1
Behavioral task
behavioral1
Sample
0eb30b13f8983e8c124a3f0fdd24d1f3_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0eb30b13f8983e8c124a3f0fdd24d1f3_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0eb30b13f8983e8c124a3f0fdd24d1f3_JaffaCakes118
-
Size
4.7MB
-
MD5
0eb30b13f8983e8c124a3f0fdd24d1f3
-
SHA1
3f652813f03ead0f6d4649e92f4b5f72fd4370cc
-
SHA256
ede530ffe5ed65b78b40035d8a4c064fdc8784184055c47644c84900e06348aa
-
SHA512
f8bf5153cb8e5701eb6c8869725ef1dbac218852d8ec1da4871843a6623389e76cc7c6a0097e91929897571b27abcd191f8e8042be120fec3a8a6cf38121558c
-
SSDEEP
98304:VBr6I8+B0EjEX1rKdzTC9U4H14iOPWtMMCSRwPzgrXlpf9qU3h7rUScTfD/craIA:/GI8+GEy998i/+PzWXlpf9pNv4DFJ/F3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0eb30b13f8983e8c124a3f0fdd24d1f3_JaffaCakes118
Files
-
0eb30b13f8983e8c124a3f0fdd24d1f3_JaffaCakes118.exe windows:5 windows x86 arch:x86
6dab571be0b1ff9ca57c4dc2b37aa10e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleMode
SetEnvironmentVariableW
CreateFileA
GetConsoleCP
GetDriveTypeW
GetProcessHeap
SetEnvironmentVariableA
GetTimeZoneInformation
IsValidCodePage
GetStringTypeW
IsProcessorFeaturePresent
LCMapStringW
GetOEMCP
GetACP
GetCPInfo
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
FindResourceW
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapSize
HeapQueryInformation
ExitProcess
SetStdHandle
HeapReAlloc
HeapAlloc
HeapFree
CreateThread
ExitThread
RaiseException
DecodePointer
EncodePointer
GetDateFormatW
GetTimeFormatW
GetSystemTimeAsFileTime
RtlUnwind
GetStartupInfoW
HeapSetInformation
GetCommandLineW
FindResourceExW
VirtualProtect
GetProfileIntW
InitializeCriticalSectionAndSpinCount
GetTempPathW
GetTempFileNameW
GetNumberFormatW
SetErrorMode
GetFileTime
GetFileSizeEx
GlobalGetAtomNameW
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
GlobalFlags
GetVolumeInformationW
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetThreadLocale
GetTickCount
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringA
InterlockedExchange
lstrlenA
lstrcmpA
SuspendThread
SetThreadPriority
GlobalSize
FormatMessageW
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
GetCurrentProcessId
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
ActivateActCtx
DeactivateActCtx
SearchPathW
OutputDebugStringW
lstrcmpW
GetVersionExW
FindFirstFileW
FindNextFileW
FindClose
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
GetSystemTime
GetLocalTime
GetFileSize
FileTimeToDosDateTime
SetFileTime
DosDateTimeToFileTime
SystemTimeToFileTime
ReadFile
DuplicateHandle
GetFileType
SetFilePointer
LoadLibraryW
FreeLibrary
WideCharToMultiByte
GetVersion
ResetEvent
FreeResource
GlobalAlloc
ResumeThread
GlobalLock
GlobalUnlock
MulDiv
GlobalFree
GetFileAttributesExW
GetFullPathNameW
ExpandEnvironmentStringsW
GetCurrentDirectoryW
SetLastError
GetEnvironmentVariableW
lstrcatW
WinExec
lstrcpynW
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
GetFileInformationByHandle
RemoveDirectoryW
CreateSemaphoreW
GetLastError
GetModuleHandleW
GetProcAddress
GetCurrentProcess
GetWindowsDirectoryW
SetEvent
LocalAlloc
LocalFree
WaitForSingleObject
Sleep
lstrcmpiW
CopyFileW
GetModuleFileNameW
GetPrivateProfileStringW
GetPrivateProfileIntW
MultiByteToWideChar
WritePrivateProfileStringW
GetFileAttributesW
SetFileAttributesW
MoveFileExW
CreateDirectoryW
CreateFileW
WriteFile
CloseHandle
DeleteFileW
CreateEventW
lstrcpyW
LoadResource
LockResource
SizeofResource
WriteConsoleW
user32
GetMenuDefaultItem
IsClipboardFormatAvailable
GetNextDlgGroupItem
InvalidateRgn
IsRectEmpty
CopyAcceleratorTableW
OffsetRect
PostThreadMessageW
DestroyIcon
WaitMessage
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
DeleteMenu
UnregisterClassW
RealChildWindowFromPoint
WindowFromPoint
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatW
ShowOwnedPopups
MapVirtualKeyW
GetKeyNameTextW
GetMessageW
TranslateMessage
ValidateRect
LoadMenuW
GetMenuStringW
AppendMenuW
InsertMenuW
RemoveMenu
IntersectRect
GetWindowThreadProcessId
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
MoveWindow
SetWindowTextW
IsDialogMessageW
CheckDlgButton
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
GetMenuState
CheckMenuItem
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
CreatePopupMenu
GetClassNameW
SetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
EnableWindow
GetClientRect
SetTimer
PtInRect
GetWindowRect
ShowScrollBar
UpdateWindow
PostMessageW
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowPos
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
GetAsyncKeyState
InvertRect
DrawFocusRect
HideCaret
EnableScrollBar
NotifyWinEvent
GetIconInfo
CopyImage
DrawIconEx
DestroyAcceleratorTable
SetClassLongW
DrawStateW
DrawEdge
DrawFrameControl
IsWindowEnabled
GetNextDlgTabItem
EndDialog
CharNextW
IsCharAlphaNumericW
wsprintfW
CharUpperW
MessageBoxW
IsWindowVisible
DestroyCursor
CopyIcon
GetWindowLongW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableW
SetCursorPos
LockWindowUpdate
TranslateAcceleratorW
InsertMenuItemW
ReuseDDElParam
UnpackDDElParam
SetClipboardData
EmptyClipboard
IsCharLowerW
MapVirtualKeyExW
UnionRect
UpdateLayeredWindow
IsMenu
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
CreateMenu
SetMenuDefaultItem
FrameRect
GetUpdateRect
CharUpperBuffW
GetDoubleClickTime
SubtractRect
GetClassLongW
GetWindowRgn
SetCapture
InvalidateRect
GetCursorPos
KillTimer
ReleaseCapture
SendMessageW
IsZoomed
PostQuitMessage
LoadImageW
LoadBitmapW
SetWindowRgn
FillRect
GetParent
DispatchMessageW
PeekMessageW
MsgWaitForMultipleObjects
CloseClipboard
GetClipboardData
OpenClipboard
FindWindowExW
BringWindowToTop
ShowWindow
IsIconic
FindWindowW
GetLastActivePopup
SetForegroundWindow
GetPropW
IsWindow
GetWindow
GetDesktopWindow
LoadIconW
DrawIcon
GetSystemMetrics
SetParent
EnableMenuItem
GetSystemMenu
SetCursor
LoadCursorW
SetWindowLongW
InflateRect
ReleaseDC
GetDC
MessageBeep
SetRect
GetSysColor
CopyRect
RegisterClassExW
GetSysColorBrush
RedrawWindow
MonitorFromPoint
gdi32
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
CreateDIBSection
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
SetDIBColorTable
StretchBlt
OffsetRgn
EnumFontFamiliesExW
GetRgnBox
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetTextFaceW
GetViewportExtEx
GetBkColor
GetTextColor
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
CreateDCW
CopyMetaFileW
DPtoLP
PatBlt
GetMapMode
SetRectRgn
CreateRectRgnIndirect
CreateHatchBrush
GetObjectType
SelectPalette
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
RectVisible
PtVisible
CreateFontW
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
CreateBitmap
SetTextJustification
TextOutW
GetCurrentObject
GetTextMetricsW
SetTextColor
SetBkMode
SetBkColor
CreatePen
MoveToEx
LineTo
SetPixel
DeleteDC
GetDeviceCaps
GetTextExtentPoint32W
GetStockObject
CreateFontIndirectW
DeleteObject
CreateRectRgn
GetPixel
CombineRgn
GetObjectW
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
SelectObject
BitBlt
CreateSolidBrush
GetWindowExtEx
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
GetTokenInformation
RegCloseKey
RegQueryInfoKeyW
RegOpenKeyExW
RegQueryValueW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW
GetUserNameW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegEnumKeyExW
RegSetValueExA
RegOpenKeyW
RegSetValueW
RegCreateKeyW
RegEnumKeyW
EqualSid
FreeSid
AllocateAndInitializeSid
RegEnumValueW
RegDeleteValueW
RegDeleteKeyW
RegFlushKey
OpenProcessToken
shell32
ShellExecuteW
SHGetDesktopFolder
SHGetPathFromIDListW
SHGetSpecialFolderLocation
DragFinish
DragQueryFileW
SHBrowseForFolderW
SHAppBarMessage
SHGetFileInfoW
comctl32
InitCommonControlsEx
_TrackMouseEvent
ImageList_GetIconSize
shlwapi
PathIsRelativeW
PathRelativePathToW
PathGetDriveNumberW
PathCommonPrefixW
PathBuildRootW
PathRemoveFileSpecW
PathRenameExtensionW
PathRemoveExtensionW
PathAddExtensionW
PathFindExtensionW
PathFindFileNameW
PathMatchSpecW
PathAppendW
PathRemoveBackslashW
PathAddBackslashW
PathRemoveArgsW
PathMakePrettyW
PathCanonicalizeW
PathQuoteSpacesW
PathParseIconLocationW
PathUnquoteSpacesW
SHDeleteKeyW
PathFileExistsW
PathCompactPathW
PathCompactPathExW
PathSetDlgItemPathW
PathSearchAndQualifyW
PathFindOnPathW
PathIsDirectoryW
PathIsSystemFolderW
PathUnmakeSystemFolderW
PathMakeSystemFolderW
StrChrW
StrToIntW
PathStripToRootW
PathSkipRootW
PathIsUNCW
ole32
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoInitializeEx
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoGetClassObject
IsAccelerator
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
CoInitialize
OleLockRunning
DoDragDrop
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CLSIDFromProgID
CoUninitialize
CLSIDFromString
oleaut32
VariantChangeType
VariantInit
SysFreeString
VariantCopy
VariantClear
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
VarBstrFromDate
OleCreateFontIndirect
SysAllocStringLen
OleLoadPicture
SysAllocString
oledlg
OleUIBusyW
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
gdiplus
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundW
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 352KB - Virtual size: 351KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ