Static task
static1
Behavioral task
behavioral1
Sample
29361055630e4ffae11b07d53cb8ddca_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
29361055630e4ffae11b07d53cb8ddca_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
29361055630e4ffae11b07d53cb8ddca_JaffaCakes118
-
Size
341KB
-
MD5
29361055630e4ffae11b07d53cb8ddca
-
SHA1
2d165775282044600c8e2e1229ec19784a4f9b28
-
SHA256
def8211686523121b762161b7e6b894a90638de863c7f7a228c6d2132415ae40
-
SHA512
8f53a755f26f50d1a58a89218f7a2e6b2484b71794e63153b6e7b9b25a270e768376fc8bda99bac333c408653dec775fc0f447d5b71edc57123dc880c0fe0bbe
-
SSDEEP
6144:qM32fXhu0LRBi6QrZljtwmYKrIS6nu18vOl49Iv1gjeiimjDUdHb2AYWLnYDKaNz:j2fVRWtrEZOy9I9ue7msdbLYqxaNz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29361055630e4ffae11b07d53cb8ddca_JaffaCakes118
Files
-
29361055630e4ffae11b07d53cb8ddca_JaffaCakes118.exe windows:4 windows x86 arch:x86
0139845e88761a3f9bcf1ee4d2671823
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
UtConvertDvtd16toDvtd32
OleCreateLinkFromDataEx
CoRevokeMallocSpy
OpenOrCreateStream
UtConvertDvtd32toDvtd16
WriteOleStg
CoInitializeSecurity
CoQueryClientBlanket
CoUnmarshalInterface
OleGetClipboard
UpdateDCOMSettings
SetDocumentBitStg
OleCreateStaticFromData
CoUninitialize
CoDosDateTimeToFileTime
OleIsCurrentClipboard
StgIsStorageFile
CoRevertToSelf
ReadClassStm
CoTreatAsClass
CoGetPSClsid
OleInitialize
OleSetContainedObject
OleDestroyMenuDescriptor
CoRegisterPSClsid
StgSetTimes
CoRegisterMessageFilter
CreateOleAdviseHolder
CoCreateGuid
CoCopyProxy
CoGetInstanceFromFile
StgCreateStorageEx
OleIsRunning
OleDoAutoConvert
OleGetIconOfFile
CoIsOle1Class
CoImpersonateClient
CreateClassMoniker
OleConvertIStorageToOLESTREAMEx
DoDragDrop
EnableHookObject
CoTaskMemFree
WriteClassStm
OleFlushClipboard
CreateItemMoniker
OleQueryLinkFromData
CreateFileMoniker
StgIsStorageILockBytes
StringFromGUID2
OleCreateLinkEx
CreateAntiMoniker
MkParseDisplayName
CoGetClassObject
CoGetCurrentLogicalThreadId
CoGetInterfaceAndReleaseStream
GetRunningObjectTable
OleRegEnumFormatEtc
OleCreateFromFileEx
CreateBindCtx
CoLoadLibrary
CLSIDFromString
GetHookInterface
StgOpenStorage
CoQueryProxyBlanket
OleCreateDefaultHandler
CoGetCallerTID
IsAccelerator
OleLoadFromStream
UtGetDvtd32Info
OleCreateFromData
CoGetMalloc
OleRun
CoFreeUnusedLibraries
CoSetProxyBlanket
MonikerCommonPrefixWith
StgOpenStorageOnILockBytes
CoGetStandardMarshal
ReleaseStgMedium
CoLockObjectExternal
OleBuildVersion
GetHGlobalFromILockBytes
OleRegGetUserType
GetHGlobalFromStream
ReadOleStg
UtGetDvtd16Info
OleUninitialize
CoReleaseMarshalData
CoGetTreatAsClass
WriteClassStg
CreateILockBytesOnHGlobal
GetConvertStg
CreateGenericComposite
CoMarshalHresult
OleCreate
StringFromIID
OleCreateFromFile
ReadClassStg
OleConvertIStorageToOLESTREAM
OleDuplicateData
OleSaveToStream
CoMarshalInterThreadInterfaceInStream
CoUnmarshalHresult
ReadFmtUserTypeStg
CoGetInstanceFromIStorage
CoGetMarshalSizeMax
GetClassFile
OleSetMenuDescriptor
shlwapi
PathCombineW
StrCmpNA
SHDeleteKeyA
StrDupW
SHOpenRegStreamW
StrFormatByteSize64A
StrFormatByteSizeW
PathCreateFromUrlW
PathIsFileSpecW
wvnsprintfA
PathRelativePathToA
PathMakePrettyW
StrPBrkW
UrlGetPartA
PathGetCharTypeA
PathCompactPathA
PathIsDirectoryW
StrRStrIA
SHRegQueryUSValueW
StrCSpnIW
SHOpenRegStream2W
StrNCatA
PathStripPathW
StrRChrA
StrCmpNW
PathSkipRootA
SHRegOpenUSKeyA
StrChrIA
StrRetToBufW
PathQuoteSpacesA
SHGetInverseCMAP
StrCmpNIA
PathIsSameRootA
StrChrW
SHSetValueW
StrTrimW
PathFindNextComponentA
PathFindFileNameA
PathFindExtensionA
PathAppendW
PathAddBackslashW
SHRegSetUSValueA
SHRegDuplicateHKey
StrCSpnA
PathCommonPrefixW
PathFindFileNameW
SHRegQueryInfoUSKeyA
SHDeleteKeyW
PathIsSystemFolderW
UrlIsNoHistoryW
PathCompactPathW
SHQueryInfoKeyA
PathIsPrefixA
PathIsContentTypeW
SHRegGetBoolUSValueW
UrlCreateFromPathA
ChrCmpIA
PathBuildRootW
UrlApplySchemeA
StrCpyNW
StrIsIntlEqualA
PathIsUNCServerW
StrCmpIW
StrFormatByteSizeA
ChrCmpIW
SHCreateStreamOnFileA
PathIsFileSpecA
StrStrIA
UrlCreateFromPathW
IntlStrEqWorkerW
SHRegSetUSValueW
UrlCanonicalizeA
PathRemoveExtensionW
StrSpnW
PathFileExistsA
StrFromTimeIntervalW
PathRemoveExtensionA
PathUndecorateA
UrlCombineW
StrRetToStrA
StrPBrkA
AssocQueryKeyA
PathGetCharTypeW
PathRenameExtensionW
PathCreateFromUrlA
PathIsRootW
StrRetToBufA
wvnsprintfW
PathCompactPathExW
SHCreateStreamOnFileW
AssocQueryKeyW
PathIsDirectoryEmptyA
UrlCompareW
StrStrW
GetMenuPosFromID
UrlCompareA
AssocQueryStringW
SHRegDeleteEmptyUSKeyW
PathIsUNCServerShareW
UrlIsW
PathIsLFNFileSpecA
PathUnmakeSystemFolderW
PathIsUNCServerShareA
PathIsUNCW
PathFileExistsW
StrCSpnW
UrlEscapeW
PathIsRelativeA
PathIsPrefixW
PathFindExtensionW
StrChrA
PathMakeSystemFolderW
SHGetThreadRef
SHRegGetUSValueW
PathIsSystemFolderA
PathRemoveArgsA
PathGetArgsA
advapi32
RegReplaceKeyW
RegEnumKeyW
TrusteeAccessToObjectA
RegDeleteValueA
RegSetValueW
GetNamedSecurityInfoExA
GetOverlappedAccessResults
RegCreateKeyW
ConvertSecurityDescriptorToAccessA
LookupPrivilegeValueA
GetMultipleTrusteeOperationW
SetAclInformation
QueryServiceObjectSecurity
SetEntriesInAuditListW
DuplicateTokenEx
RegisterEventSourceA
CryptDuplicateHash
SetNamedSecurityInfoExW
ConvertAccessToSecurityDescriptorA
CryptDestroyKey
ObjectDeleteAuditAlarmA
LookupAccountNameA
RegEnumValueW
RegisterServiceCtrlHandlerW
RegFlushKey
IsValidSid
RegNotifyChangeKeyValue
GetSecurityDescriptorOwner
GetAuditedPermissionsFromAclW
RegReplaceKeyA
CryptEnumProviderTypesW
RegSetValueExA
BuildImpersonateTrusteeW
CryptAcquireContextW
QueryServiceLockStatusA
RevertToSelf
LookupAccountSidW
RegGetKeySecurity
StartServiceCtrlDispatcherW
GetNamedSecurityInfoA
GetSidIdentifierAuthority
GetEffectiveRightsFromAclA
RegCreateKeyExA
CryptGetDefaultProviderW
EnumServicesStatusA
RegRestoreKeyW
GetOldestEventLogRecord
CryptVerifySignatureW
SetServiceObjectSecurity
MakeSelfRelativeSD
RegDeleteKeyW
OpenServiceW
SetTokenInformation
RegOpenKeyW
ReadEventLogA
QueryServiceConfigW
PrivilegedServiceAuditAlarmW
InitiateSystemShutdownA
LockServiceDatabase
CryptEncrypt
GetAuditedPermissionsFromAclA
RegCreateKeyExW
StartServiceA
CryptGenRandom
CryptSetProvParam
AddAuditAccessAce
EqualSid
GetSecurityInfoExA
SetFileSecurityW
ConvertSecurityDescriptorToAccessNamedW
CryptGetHashParam
GetNumberOfEventLogRecords
FreeSid
PrivilegedServiceAuditAlarmA
DuplicateToken
ObjectOpenAuditAlarmA
AllocateAndInitializeSid
CreateProcessAsUserA
LookupAccountNameW
InitializeSecurityDescriptor
CancelOverlappedAccess
RegQueryInfoKeyW
AccessCheckAndAuditAlarmA
CloseServiceHandle
RegCreateKeyA
ClearEventLogA
RegOpenKeyExA
BackupEventLogA
GetServiceDisplayNameW
OpenEventLogA
BuildExplicitAccessWithNameA
OpenProcessToken
CryptDuplicateKey
EnumDependentServicesW
InitiateSystemShutdownW
CryptGenKey
CryptImportKey
StartServiceW
BuildTrusteeWithSidW
ImpersonateSelf
LookupSecurityDescriptorPartsW
CryptSetHashParam
BuildTrusteeWithNameA
LookupPrivilegeDisplayNameA
CreateServiceA
GetAce
GetNamedSecurityInfoExW
GetMultipleTrusteeA
kernel32
CreateFileA
BuildCommDCBAndTimeoutsA
EnumSystemCodePagesW
GetBinaryTypeA
DuplicateHandle
SetErrorMode
CreateDirectoryW
GetPriorityClass
SetCurrentDirectoryW
MoveFileA
WaitCommEvent
VirtualQueryEx
FindNextFileA
ReadConsoleOutputAttribute
GetThreadPriority
OpenFile
WriteFile
HeapWalk
VirtualProtectEx
SetLastError
GlobalUnWire
ResumeThread
GetEnvironmentStringsA
GetCommTimeouts
GetSystemTimeAsFileTime
FlushViewOfFile
GetNamedPipeInfo
LocalSize
Process32First
PostQueuedCompletionStatus
LCMapStringW
WriteConsoleW
VirtualAlloc
SetEndOfFile
GetNamedPipeHandleStateW
GetNumberFormatW
GetThreadTimes
GetFileTime
GetConsoleTitleW
WriteProfileStringW
EnumResourceTypesA
IsBadStringPtrW
GetUserDefaultLangID
GlobalCompact
GetCalendarInfoA
GetFileInformationByHandle
LocalCompact
PeekConsoleInputW
GetCommState
SetMailslotInfo
HeapCreate
CreateMutexA
HeapValidate
lstrlenA
CompareStringA
GetThreadPriorityBoost
VirtualQuery
lstrcmpW
MultiByteToWideChar
RequestWakeupLatency
LoadModule
SetConsoleTitleA
HeapUnlock
VirtualProtect
IsSystemResumeAutomatic
ScrollConsoleScreenBufferA
GetConsoleScreenBufferInfo
SetProcessShutdownParameters
LocalHandle
EnumSystemLocalesW
FindClose
GlobalLock
LoadLibraryExA
OpenEventW
SetConsoleCtrlHandler
lstrcpynA
CreateWaitableTimerW
GetOEMCP
EnumResourceTypesW
SetVolumeLabelA
RemoveDirectoryW
WriteConsoleOutputCharacterW
AddAtomA
lstrcpyA
GetConsoleTitleA
SetThreadExecutionState
GetSystemInfo
LocalShrink
EndUpdateResourceW
FreeEnvironmentStringsW
FindFirstFileA
BuildCommDCBA
GetProcessWorkingSetSize
GetProcessAffinityMask
BeginUpdateResourceA
IsDBCSLeadByte
GetCurrentThreadId
GetPrivateProfileStructW
CommConfigDialogA
GlobalAddAtomA
LoadLibraryW
EnumTimeFormatsA
FindFirstFileExA
SetFileApisToANSI
DefineDosDeviceA
BeginUpdateResourceW
HeapLock
lstrcmpiW
GetTapePosition
CallNamedPipeW
UnmapViewOfFile
VirtualUnlock
SetHandleInformation
GetPrivateProfileIntW
WriteConsoleInputA
GlobalMemoryStatus
GetEnvironmentStrings
GetVersionExW
OpenMutexA
ConvertThreadToFiber
GlobalGetAtomNameA
PeekConsoleInputA
ClearCommError
Heap32ListNext
GetBinaryTypeW
EnumResourceLanguagesA
WriteConsoleOutputW
SuspendThread
IsBadStringPtrA
GetShortPathNameA
ReadProcessMemory
FindFirstChangeNotificationA
ReleaseSemaphore
SetThreadPriorityBoost
SetMessageWaitingIndicator
SetComputerNameW
user32
CharLowerW
OemToCharA
GetMenuStringW
DdeGetData
GetWindowModuleFileNameA
CreateWindowStationW
GetDlgItemTextW
SetForegroundWindow
KillTimer
FreeDDElParam
RegisterClassExW
CharUpperW
GetClientRect
TrackPopupMenuEx
InvalidateRect
SendMessageA
EqualRect
LoadBitmapA
GetWindowRect
DefMDIChildProcW
GetMenu
CallMsgFilter
DdeDisconnectList
SwitchDesktop
GetMessageA
SendIMEMessageExW
DdeGetLastError
DlgDirListComboBoxW
InsertMenuItemW
LookupIconIdFromDirectoryEx
OpenIcon
SetMenuItemInfoW
CharNextExA
GetScrollPos
WINNLSEnableIME
UnregisterClassA
IsMenu
GetCursorPos
GetMenuItemInfoA
DdeClientTransaction
RegisterHotKey
VkKeyScanA
GetWindowWord
TabbedTextOutW
CallWindowProcA
SetWindowContextHelpId
OpenWindowStationW
CopyRect
GetIconInfo
SetMenu
InSendMessage
SetDlgItemTextW
SetWindowsHookExA
RegisterClipboardFormatA
AppendMenuA
MapDialogRect
ChildWindowFromPointEx
NotifyWinEvent
TileChildWindows
SetWindowsHookW
RealGetWindowClass
CallWindowProcW
LoadBitmapW
GetActiveWindow
DrawFocusRect
MapVirtualKeyA
SystemParametersInfoW
GetWindowContextHelpId
GetAltTabInfo
GetClipboardFormatNameA
DdeAccessData
LoadCursorFromFileA
ClipCursor
CharNextA
SetWindowTextA
DefDlgProcA
SetMessageExtraInfo
ScreenToClient
CharLowerBuffA
ScrollWindow
CharToOemW
AnyPopup
GetMenuItemID
IsRectEmpty
CharUpperBuffW
CharToOemBuffA
FindWindowExW
ChangeMenuW
GetMessagePos
LoadImageA
EndDeferWindowPos
TranslateAcceleratorA
IsCharAlphaNumericA
GetNextDlgTabItem
DrawCaption
ReuseDDElParam
IsWindow
SendMessageW
EnumChildWindows
GetUserObjectInformationA
VkKeyScanW
DlgDirSelectExW
DestroyAcceleratorTable
EndPaint
GetClassInfoA
HideCaret
PostMessageA
RealChildWindowFromPoint
BeginDeferWindowPos
ClientToScreen
GetPropW
CallMsgFilterA
GetLastActivePopup
DestroyWindow
DefWindowProcA
EnumDisplayMonitors
GetWindowTextA
IsDlgButtonChecked
MonitorFromWindow
CharPrevA
GetMessageExtraInfo
InvalidateRgn
Sections
.text Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 206B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE