Static task
static1
Behavioral task
behavioral1
Sample
279e467a6a8f6b77f45b628bb3255048_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
279e467a6a8f6b77f45b628bb3255048_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
279e467a6a8f6b77f45b628bb3255048_JaffaCakes118
-
Size
32KB
-
MD5
279e467a6a8f6b77f45b628bb3255048
-
SHA1
c92209b05b8c12a4245e7b57f9ffec5d86f825d9
-
SHA256
b7722214d567fd39f7f865155ec54dd69ed4e631dc7ea7c371a5c3d18051e9c0
-
SHA512
02ce5e3d2b59401c1545f856b82947947818e19ca3bb86a4ff7dbec0b6fa193b7231a7f4c66569ef1396ba24017ea401916d7b3d7255e1f2a2786cdc693a2114
-
SSDEEP
768:XXIa6GRXRUS/fxLNJjv+3WAhEo460wlX5KIEp2:Xn6GRXRUmf9C3W0s6TX5KLc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 279e467a6a8f6b77f45b628bb3255048_JaffaCakes118
Files
-
279e467a6a8f6b77f45b628bb3255048_JaffaCakes118.exe windows:4 windows x86 arch:x86
f68301e36f141835f2aaab02d97f42ce
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
uxtheme
GetThemeMetric
DrawThemeBackground
GetThemeColor
OpenThemeData
IsThemeActive
GetThemeMargins
GetThemeBackgroundContentRect
CloseThemeData
IsAppThemed
GetThemeFont
GetThemeAppProperties
GetThemeBackgroundExtent
DrawThemeParentBackground
SetWindowTheme
GetThemePartSize
gdi32
GetBkMode
SetBkColor
GetDeviceCaps
BitBlt
CreateRectRgnIndirect
GetSystemPaletteEntries
CreateFontIndirectA
OffsetRgn
SetBrushOrgEx
SaveDC
LPtoDP
CreateSolidBrush
SetViewportOrgEx
SetWindowOrgEx
CreateHalftonePalette
SetTextColor
SetViewportExtEx
GetObjectA
CreateMetaFileW
CreateFontIndirectW
ExtCreateRegion
GetRegionData
CreatePatternBrush
DeleteEnhMetaFile
GetTextCharset
SetTextAlign
CreateRectRgn
MoveToEx
CombineRgn
ExtTextOutW
GetBkColor
EqualRgn
GetDCOrgEx
CreateBitmap
StretchDIBits
Rectangle
LineTo
CreateDIBSection
SetWindowExtEx
PlayEnhMetaFile
GetPixel
SelectObject
GetRgnBox
SetRectRgn
CloseMetaFile
CreateCompatibleDC
RectVisible
GetObjectW
DeleteDC
GetBrushOrgEx
SetMapMode
SelectPalette
RestoreDC
CreatePalette
SetDCPenColor
GetTextExtentPoint32A
CreatePen
CreatePolygonRgn
CreateEnhMetaFileA
IntersectClipRect
CreateDCW
CreateCompatibleBitmap
GetTextExtentPoint32W
GetPaletteEntries
StretchBlt
GetTextMetricsW
GetDIBits
CreateDIBPatternBrushPt
SetLayout
OffsetWindowOrgEx
GetLayout
GetTextExtentPointW
GetGlyphIndicesW
GetTextColor
TextOutA
TextOutW
GetStockObject
DeleteObject
PatBlt
GetTextAlign
SetBkMode
RealizePalette
CreateFontW
SetPaletteEntries
CreateDCA
CloseEnhMetaFile
SetStretchBltMode
GetClipBox
GetTextExtentExPointI
advapi32
RegSetValueExA
CryptCreateHash
RegOpenKeyExA
RegEnumKeyExW
SetTokenInformation
OpenProcessToken
RegDeleteValueW
TraceEvent
RegDeleteKeyW
UnregisterTraceGuids
IsTextUnicode
CreateProcessAsUserW
RegDeleteValueA
RegEnumValueW
TraceMessage
ConvertStringSidToSidW
RegEnumValueA
RegQueryValueExW
GetTraceLoggerHandle
ImpersonateSelf
CryptDestroyHash
RegOpenKeyW
RegCreateKeyA
RegEnumKeyW
RegOpenKeyExW
GetTraceEnableFlags
ConvertSidToStringSidW
OpenThreadToken
DuplicateTokenEx
RegCreateKeyExW
CryptHashData
RegQueryValueExA
RegOpenCurrentUser
RegSetValueExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
CryptReleaseContext
RegisterTraceGuidsW
SetThreadToken
RegCreateKeyExA
CryptGetHashParam
RegQueryValueW
GetTokenInformation
RegCloseKey
RegDeleteKeyA
GetUserNameW
RegQueryInfoKeyW
GetLengthSid
CryptAcquireContextW
GetTraceEnableLevel
rtutils
TraceDumpExW
TraceDumpExA
kernel32
VirtualAlloc
user32
SendMessageA
UpdateWindow
GetWindowLongW
ChangeClipboardChain
SendMessageW
DialogBoxIndirectParamA
PeekMessageA
DestroyWindow
DdeUninitialize
CallWindowProcW
GetTopWindow
CharPrevA
SetClipboardData
GetLastActivePopup
SetMenuItemBitmaps
RegisterWindowMessageA
PostMessageW
IsWindowVisible
GetWindowLongA
EnableWindow
IsHungAppWindow
InsertMenuItemW
GetKeyboardLayout
GetDlgCtrlID
PostQuitMessage
SetTimer
FindWindowExW
SetScrollPos
SetWindowLongW
MessageBeep
PostThreadMessageA
SetActiveWindow
SetWindowRgn
LoadBitmapW
wsprintfW
GetActiveWindow
NotifyWinEvent
GetPropW
MsgWaitForMultipleObjectsEx
EndDeferWindowPos
GetMonitorInfoW
LockSetForegroundWindow
DeleteMenu
DispatchMessageA
CopyRect
IsWindow
ShowCaret
GetWindowTextLengthW
SendDlgItemMessageW
GetClassInfoW
LoadImageW
GetMessagePos
GetSysColor
EqualRect
ClientToScreen
RegisterClipboardFormatA
CharNextA
GetWindow
GetWindowPlacement
DestroyMenu
CreateIconIndirect
AdjustWindowRectEx
MsgWaitForMultipleObjects
EndDialog
ReleaseCapture
GetAncestor
GetKeyNameTextW
TrackPopupMenu
DialogBoxIndirectParamW
ScreenToClient
MapVirtualKeyW
DeferWindowPos
CreateWindowExW
DrawEdge
UnhookWindowsHookEx
PostThreadMessageW
IsWindowUnicode
GetShellWindow
CreateMenu
GetSysColorBrush
MonitorFromRect
LoadCursorW
DdeInitializeW
ReleaseDC
PostMessageA
GetForegroundWindow
CheckMenuRadioItem
EmptyClipboard
DdeNameService
CopyImage
SetMenu
MonitorFromWindow
GetMenuItemInfoW
MessageBoxIndirectW
TrackMouseEvent
ShowWindow
TranslateMessage
DdeDisconnect
InsertMenuW
GetClassLongW
DestroyAcceleratorTable
WaitMessage
SetPropW
SystemParametersInfoW
SetRectEmpty
WindowFromPoint
GetSystemMetrics
SetWindowLongA
CharLowerW
GetWindowRect
SetWindowPlacement
GetClassWord
IsWindowEnabled
GetComboBoxInfo
PeekMessageW
DrawFrameControl
SetCursorPos
CopyIcon
EnableMenuItem
InvalidateRect
DialogBoxParamW
GetWindowDC
ShowOwnedPopups
EnumWindows
BeginDeferWindowPos
SetPropA
CharNextW
LoadStringA
GetFocus
GetMessageA
MessageBoxExW
GetDialogBaseUnits
DdeCreateStringHandleW
DrawTextExW
DefWindowProcA
GetParent
GetMessageW
ChildWindowFromPoint
GetClipboardFormatNameW
LoadMenuW
MoveWindow
TranslateAcceleratorW
RemoveMenu
GetDC
CheckDlgButton
OffsetRect
SendNotifyMessageW
LoadCursorA
SetWindowPos
PtInRect
SetDlgItemTextW
IntersectRect
GetCursor
DdeCreateDataHandle
DrawFocusRect
GetSubMenu
GetWindowInfo
FindWindowW
GetMessageTime
SetClipboardViewer
SystemParametersInfoA
GetDesktopWindow
GetCursorPos
GetIconInfo
UnregisterClassW
MapDialogRect
DdeConnect
MessageBoxW
GetMenuItemID
GetDlgItem
MonitorFromPoint
GetMenuItemCount
FillRect
DispatchMessageW
SetWindowsHookExW
CharLowerBuffW
HideCaret
CreateDialogParamW
GetClipboardData
ShowScrollBar
DdeClientTransaction
DrawTextW
CloseClipboard
SetFocus
BeginPaint
DrawIconEx
IsIconic
SetMenuDefaultItem
EnumDesktopWindows
GetMenuItemInfoA
AppendMenuW
GetPropA
DdeGetData
GetNextDlgTabItem
TrackPopupMenuEx
GetLastInputInfo
IsMenu
MessageBoxIndirectA
AllowSetForegroundWindow
AttachThreadInput
WaitForInputIdle
IsDlgButtonChecked
DdeFreeDataHandle
GetMenuStringW
RegisterClassExW
GetClassNameW
RedrawWindow
RemovePropA
IsRectEmpty
GetWindowThreadProcessId
EndPaint
MessageBoxExA
GetCapture
DestroyIcon
GetProcessWindowStation
SetCursor
UnionRect
IsCharAlphaNumericW
CallNextHookEx
SetMenuItemInfoW
WinHelpW
RegisterClassW
SetScrollInfo
LoadIconW
GetDlgItemTextW
GetMenuState
KillTimer
SendMessageTimeoutW
GetWindowRgnBox
GetClientRect
IsChild
AdjustWindowRect
GetWindowTextW
RemovePropW
SetWindowTextW
MapWindowPoints
SetDlgItemInt
UpdateLayeredWindow
EnumThreadWindows
DdeQueryStringW
GetAsyncKeyState
EndMenu
RegisterWindowMessageW
CallMsgFilterW
VkKeyScanExW
AnimateWindow
GetSystemMenu
SetParent
GetMenuDefaultItem
GetKeyState
CreatePopupMenu
CharPrevW
OpenClipboard
DialogBoxParamA
SendMessageTimeoutA
LoadStringW
SetRect
FindWindowA
CharUpperW
InflateRect
DefWindowProcW
CheckRadioButton
GetScrollInfo
RegisterClipboardFormatW
IsDialogMessageW
CheckMenuItem
SetForegroundWindow
GetDoubleClickTime
LoadAcceleratorsW
EnumDisplaySettingsW
GetClassInfoExW
SetCapture
DdeFreeStringHandle
EnumChildWindows
ddraw
DirectDrawCreate
psapi
GetProcessImageFileNameW
shell32
Shell_NotifyIconA
SHGetFolderPathAndSubDirW
SHFileOperationW
SHBrowseForFolderW
SHGetSpecialFolderPathW
SHGetDataFromIDListW
SHAppBarMessage
DragQueryFileW
ShellExecuteExW
ExtractIconW
SHGetDesktopFolder
SHGetPathFromIDListW
SHGetPathFromIDListA
SHBindToParent
ShellExecuteW
SHGetFolderPathW
SHGetInstanceExplorer
ExtractAssociatedIconExW
SHCreateShellItem
SHChangeNotify
ShellExecuteA
SHGetFolderLocation
ShellAboutW
SHPathPrepareForWriteW
SHGetSpecialFolderLocation
SHSetLocalizedName
ExtractIconExW
SHGetFileInfoW
Shell_NotifyIconW
ntdll
RtlAddAccessAllowedObjectAce
NtSetIoCompletion
NtQuerySemaphore
RtlAdjustPrivilege
Sections
.text Size: 1024B - Virtual size: 1000B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE