Static task
static1
Behavioral task
behavioral1
Sample
JJSetup5.3.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
JJSetup5.3.exe
Resource
win10v2004-20241007-en
Behavioral task
behavioral3
Sample
.url
Resource
win7-20240903-en
Behavioral task
behavioral4
Sample
.url
Resource
win10v2004-20241007-en
General
-
Target
3b1cc1e92e40540ce0648021748dcb18_JaffaCakes118
-
Size
13.4MB
-
MD5
3b1cc1e92e40540ce0648021748dcb18
-
SHA1
714059ec6ca6f0d37e3cd9d0df30a1940b4a5675
-
SHA256
537236193461511718eb83d92ce0d57f00635208071d4b410772cbc64dcaa487
-
SHA512
2c38a50c36f57b4c9bc3d9b8abf3a4f5baac567e18d61f721141c2ea1f0ce9f76707e3785d4266795640a24ff50d6b89464148505c899b8bf5d80a3daf4bb9ee
-
SSDEEP
393216:YaYqDH7bKHjhw9sIIytlI0exTmwKFPwrejX4YRfpgs3BtvZq8H:jYG7byjhjpUIxxTuF4r+Nh2wVRH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/JJSetup5.3.exe
Files
-
3b1cc1e92e40540ce0648021748dcb18_JaffaCakes118.zip
-
JJSetup5.3.exe.exe windows:5 windows x86 arch:x86
7084ccd7e85fe203c74da639bcec0149
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW
imm32
ImmInstallIMEW
kernel32
GetFileSize
GetFileTime
CreateFileW
FindClose
FindFirstFileW
GetVolumeInformationW
GetFullPathNameW
DuplicateHandle
SetEndOfFile
ReadFile
WriteFile
LockFile
UnlockFile
CloseHandle
FlushFileBuffers
LocalFree
FindNextFileW
CopyFileW
MultiByteToWideChar
WideCharToMultiByte
GetTickCount
CreateMutexW
WaitForSingleObject
ReleaseMutex
GetFileAttributesExW
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
FileTimeToSystemTime
FileTimeToLocalFileTime
lstrlenA
RaiseException
DeleteCriticalSection
FindResourceExW
MulDiv
lstrcpyW
FlushInstructionCache
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
LoadLibraryExW
lstrcmpiW
InitializeCriticalSectionAndSpinCount
SetFileTime
GetLocaleInfoA
SetFilePointer
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetTimeZoneInformation
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapCreate
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
SetLastError
TlsFree
SetFileAttributesW
IsDebuggerPresent
TlsSetValue
TlsGetValue
GetProcAddress
FreeLibrary
GetCurrentThreadId
GetWindowsDirectoryW
CreateDirectoryW
GetCurrentProcess
Sleep
DeleteFileW
lstrlenW
GetFileAttributesW
FindResourceW
SizeofResource
LoadResource
LockResource
GetVersionExW
GetSystemDirectoryW
GetModuleFileNameW
GetDriveTypeW
LoadLibraryW
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
CreateThread
ExitThread
CompareStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
RtlUnwind
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
GetProcessHeap
GetLastError
CompareStringW
SetEnvironmentVariableA
CreateFileA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
user32
UnregisterClassA
CharNextW
CallWindowProcW
RegisterWindowMessageW
GetDC
GetWindowRect
MonitorFromWindow
GetMonitorInfoW
GetClientRect
MapWindowPoints
SetWindowPos
SetWindowLongW
GetDlgItem
SetDlgItemTextW
EnableWindow
KillTimer
SetTimer
SetWindowTextW
DestroyWindow
MessageBeep
SetFocus
GetParent
GetWindowTextLengthW
GetWindowTextW
GetWindow
GetWindowLongW
CharUpperW
FindWindowExW
SendMessageW
FindWindowW
UnloadKeyboardLayout
PostMessageW
DefWindowProcW
MessageBoxW
GetActiveWindow
ReleaseDC
gdi32
GetDeviceCaps
GetObjectW
DeleteObject
DeleteDC
CreateFontIndirectW
comdlg32
GetFileTitleW
advapi32
SetNamedSecurityInfoW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegQueryInfoKeyW
RegCreateKeyExW
RegCreateKeyW
GetNamedSecurityInfoW
AllocateAndInitializeSid
SetEntriesInAclW
RegDeleteKeyW
FreeSid
RegSetValueExW
RegEnumKeyExW
GetUserNameW
shell32
SHGetPathFromIDListW
SHGetFolderPathW
ord680
ShellExecuteW
SHBrowseForFolderW
ole32
CoCreateInstance
CoUninitialize
CoTaskMemAlloc
CoTaskMemRealloc
CoInitialize
CoTaskMemFree
oleaut32
VarUI4FromStr
shlwapi
PathFindFileNameW
PathIsUNCW
PathStripToRootW
comctl32
PropertySheetW
CreatePropertySheetPageW
InitCommonControlsEx
DestroyPropertySheetPage
Sections
.text Size: 198KB - Virtual size: 198KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13.3MB - Virtual size: 13.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
.txt
-
.url