Static task
static1
Behavioral task
behavioral1
Sample
29e97ae8023ab964d7aba240130f437a_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
29e97ae8023ab964d7aba240130f437a_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
29e97ae8023ab964d7aba240130f437a_JaffaCakes118
-
Size
589KB
-
MD5
29e97ae8023ab964d7aba240130f437a
-
SHA1
3bad112ac6ac05c622e863b71b86b1e21e7f8ed8
-
SHA256
ce77e89a8e39d8c6ff7440ceca572eebfdabf90e89fb002d142245f30c289fd1
-
SHA512
0705f9791b812a6a3244d60ca5d6f35c4cb7156ff8b1562fc5f75b3d7a4a7b140dd9d3bf2235418b9210a0b4a177ef9e8836068f58688165ce4a9975b47cebea
-
SSDEEP
12288:wNpv+j8mmWoOmK+ApjAKxhvNliTrLDHoBu3VDXa:wOjLmapjhv6Tr4SXa
Malware Config
Signatures
Files
-
29e97ae8023ab964d7aba240130f437a_JaffaCakes118.exe windows:4 windows x86 arch:x86
ca61e855c55f215370501f90dc733442
Code Sign
3d:62:b0:77:de:2b:5f:75:ba:18:d1:90:dd:f5:bc:53Certificate
IssuerCN=company,1.2.840.113549.1.9.1=#0c13636f6d70616e7940636f6d70616e792e636f6dNot Before01/01/2000, 08:00Not After01/01/2099, 08:00SubjectCN=company,1.2.840.113549.1.9.1=#0c13636f6d70616e7940636f6d70616e792e636f6dSigner
Actual PE DigestDigest AlgorithmPE Digest MatchesfalseHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
shlwapi
PathIsUNCA
PathFileExistsA
SHGetValueA
PathRemoveExtensionA
PathStripToRootA
PathFindExtensionA
PathFindFileNameA
StrToIntA
advapi32
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
SetSecurityDescriptorDacl
RegOpenKeyA
RegDeleteKeyA
kernel32
DuplicateHandle
FindClose
FindFirstFileA
GetFullPathNameA
GlobalGetAtomNameA
InterlockedIncrement
InterlockedDecrement
GetVersionExA
lstrcmpW
GlobalFindAtomA
GetModuleFileNameW
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
TlsGetValue
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
WritePrivateProfileStringA
GetCurrentDirectoryA
GlobalFlags
SetErrorMode
GetFileAttributesA
GetFileTime
GetCPInfo
GetOEMCP
GetSystemTimeAsFileTime
GetThreadLocale
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
WriteConsoleW
GetFileType
GetStdHandle
RtlUnwind
ExitThread
CreateThread
HeapSize
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
GetConsoleCP
GetConsoleMode
Sleep
GetTimeZoneInformation
GetACP
LCMapStringA
LCMapStringW
SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
DebugBreak
GetDriveTypeA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
GetStringTypeA
GetStringTypeW
SetEnvironmentVariableA
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
DeleteFileA
ReleaseSemaphore
CreateSemaphoreA
GetCurrentProcessId
GlobalAddAtomA
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
lstrcmpA
GlobalDeleteAtom
GetModuleHandleA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
MulDiv
CreateEventA
SuspendThread
SetEvent
WaitForSingleObject
ResumeThread
SetThreadPriority
RaiseException
LocalAlloc
SetFilePointer
WriteFile
ReadFile
CreateFileA
FreeResource
LocalFree
GetCurrentProcess
SetPriorityClass
DeviceIoControl
CreateMutexA
GetCurrentThreadId
SetLastError
GetVolumeInformationA
CopyFileA
GetTempFileNameA
GetModuleFileNameA
ExitProcess
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
FreeLibrary
GetVersion
CompareStringA
lstrcmpiA
InterlockedExchange
MultiByteToWideChar
CompareStringW
lstrlenA
LocalFileTimeToFileTime
DosDateTimeToFileTime
SetFileTime
CloseHandle
SystemTimeToFileTime
CompareFileTime
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetProcAddress
LoadLibraryA
GetTempPathA
GetLastError
HeapFree
CreateDirectoryA
user32
GrayStringA
BeginPaint
EndPaint
DestroyMenu
UnregisterClassA
ShowWindow
IsDialogMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetFocus
GetForegroundWindow
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
DrawTextExA
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
GetLastActivePopup
MessageBoxA
SetCursor
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
DrawTextA
TabbedTextOutA
GetSubMenu
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
SendMessageA
GetKeyState
PeekMessageA
ValidateRect
wsprintfA
GetParent
GetClassNameA
GetSystemMetrics
SendMessageTimeoutA
EnumChildWindows
EnumThreadWindows
WaitForInputIdle
BringWindowToTop
GetWindowThreadProcessId
SetWindowTextA
GetClientRect
EnableWindow
SetTimer
SetParent
PostMessageA
RegisterWindowMessageA
EnumWindows
GetWindowTextA
GetCursorPos
CharUpperA
ClientToScreen
LoadCursorA
GetDC
ReleaseDC
CopyRect
GetSysColorBrush
SetMenuItemBitmaps
gdi32
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SetTextColor
GetStockObject
ExtTextOutA
GetClipBox
CreateBitmap
DeleteDC
GetDeviceCaps
TextOutA
RectVisible
PtVisible
SetMapMode
RestoreDC
SaveDC
DeleteObject
GetObjectA
SetBkColor
Escape
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
ole32
OleRun
CoInitialize
CoCreateInstance
CoGetMalloc
CoUninitialize
CoInitializeEx
CoDisconnectObject
oleaut32
LoadTypeLi
VariantClear
SysFreeString
SysAllocString
SysAllocStringLen
VariantInit
VariantCopy
GetErrorInfo
VariantChangeType
SysStringLen
SysAllocStringByteLen
Sections
.text Size: 468KB - Virtual size: 467KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 744B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ