Static task
static1
Behavioral task
behavioral1
Sample
3cdcb2f3fd5618b843a9f4376d13298f_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
3cdcb2f3fd5618b843a9f4376d13298f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
3cdcb2f3fd5618b843a9f4376d13298f_JaffaCakes118
-
Size
650KB
-
MD5
3cdcb2f3fd5618b843a9f4376d13298f
-
SHA1
3eec2712c86f07fd6f2446791b3c4f741c989bdc
-
SHA256
d2a58de49eb1c9263f70e65c818de942d28acb216f6abdc6912a6b8919f5b8f8
-
SHA512
164564f83fb95e7d3692c3a530463907c52eb818f7d81fdf39b8f72edf103c4ff46325daa38e32b29a8e17dbb604a26ccbfb6f4f3d34f8041de36d2a9737056e
-
SSDEEP
12288:9zTTnqyManoxhGuwsf8GTsLWe94Gqi3wm8YRXlG9F9ZcnEXzp0:RHqlhpp0PAP7gXlG9Fzcn5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3cdcb2f3fd5618b843a9f4376d13298f_JaffaCakes118
Files
-
3cdcb2f3fd5618b843a9f4376d13298f_JaffaCakes118.exe windows:4 windows x86 arch:x86
efd14c08e1ad810be5bf7982c459b8bf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ScrollConsoleScreenBufferA
SetupComm
EnumCalendarInfoA
GetNumberOfConsoleMouseButtons
lstrcatA
FlushConsoleInputBuffer
SetLastError
GetDiskFreeSpaceExA
IsBadCodePtr
FindAtomW
SetFileAttributesW
CloseHandle
LCMapStringW
WriteConsoleW
SetThreadPriority
MapViewOfFile
SetStdHandle
WaitForMultipleObjectsEx
QueryDosDeviceA
lstrcmpiA
BeginUpdateResourceA
GetSystemTimeAsFileTime
GlobalSize
PurgeComm
CreateMailslotW
CreateSemaphoreW
SetThreadLocale
LocalFlags
GetComputerNameA
PulseEvent
HeapValidate
lstrcmpW
SetFileAttributesA
GetPrivateProfileSectionW
EnumResourceLanguagesA
SetTapePosition
WriteTapemark
GetFileType
GetWindowsDirectoryA
EnumCalendarInfoExA
GetCurrentThreadId
FindResourceA
GetNamedPipeInfo
LocalReAlloc
FileTimeToDosDateTime
SetErrorMode
PostQueuedCompletionStatus
CreateIoCompletionPort
SetFileApisToOEM
WritePrivateProfileStringW
GetPrivateProfileStringW
SetLocaleInfoA
TlsSetValue
UnlockFile
CompareStringW
CopyFileA
CallNamedPipeA
QueryPerformanceFrequency
GetFileSize
GetPrivateProfileSectionNamesA
FreeLibraryAndExitThread
UnhandledExceptionFilter
WriteConsoleOutputW
GetEnvironmentStrings
GetPrivateProfileStructA
FindNextFileW
lstrcpy
VirtualAlloc
CreateProcessW
SetCommState
SetMailslotInfo
SetThreadIdealProcessor
OpenWaitableTimerA
WriteProfileStringW
GetLocalTime
OutputDebugStringA
ReadConsoleOutputCharacterW
Toolhelp32ReadProcessMemory
MultiByteToWideChar
EnumTimeFormatsW
GlobalUnfix
GetProcAddress
GetTempPathA
AddAtomA
GetModuleHandleW
GetExitCodeProcess
CreateDirectoryExW
TlsGetValue
GetVolumeInformationW
GetCPInfoExA
CreateMailslotA
GetLongPathNameA
lstrlenW
GetOverlappedResult
SuspendThread
CreateFileA
WinExec
LockResource
GlobalCompact
IsBadHugeWritePtr
CreateProcessA
SetEnvironmentVariableA
GetCPInfo
GetCalendarInfoA
GetAtomNameW
GetTempFileNameW
SetCurrentDirectoryA
WriteConsoleInputA
GetStartupInfoA
SetConsoleCtrlHandler
CreateDirectoryW
RemoveDirectoryA
WaitNamedPipeW
BuildCommDCBA
GlobalGetAtomNameW
GetVersion
FindNextChangeNotification
SetCommConfig
lstrcpyA
GlobalUnWire
GetConsoleOutputCP
WaitForSingleObject
VirtualProtectEx
SetConsoleMode
SetConsoleActiveScreenBuffer
ReadConsoleOutputAttribute
GetFullPathNameW
GetDiskFreeSpaceW
LocalFree
VirtualProtect
GetOEMCP
GetPrivateProfileStructW
EnumResourceTypesA
lstrcpyn
shlwapi
wvnsprintfW
PathSearchAndQualifyW
UrlCanonicalizeA
UrlIsW
StrDupA
SHSkipJunction
StrTrimA
PathCombineW
SHRegCreateUSKeyA
PathIsDirectoryW
StrPBrkA
StrToIntW
StrCSpnW
StrChrIA
PathCompactPathW
PathIsLFNFileSpecA
StrFromTimeIntervalA
SHOpenRegStream2W
PathIsContentTypeW
UrlApplySchemeW
PathStripToRootW
SHStrDupW
SHAutoComplete
UrlIsOpaqueW
PathBuildRootA
SHStrDupA
StrRChrIW
PathMakeSystemFolderW
StrCSpnA
PathSearchAndQualifyA
StrCmpNA
SHDeleteEmptyKeyA
StrFormatKBSizeA
PathCompactPathExA
SHOpenRegStream2A
UrlCombineA
PathIsLFNFileSpecW
PathIsRootA
StrCpyW
StrCatW
ChrCmpIA
StrRStrIW
PathIsFileSpecA
StrStrIW
PathIsNetworkPathA
PathIsUNCA
UrlApplySchemeA
PathRemoveFileSpecA
GetMenuPosFromID
PathFindExtensionA
SHRegEnumUSValueA
PathBuildRootW
StrFormatByteSizeW
PathFileExistsW
UrlGetPartA
PathIsPrefixA
StrToIntExA
StrCSpnIA
PathCreateFromUrlW
UrlEscapeW
SHRegWriteUSValueA
AssocQueryKeyA
SHQueryValueExW
SHRegCreateUSKeyW
PathMatchSpecW
StrChrW
SHDeleteKeyA
PathGetDriveNumberW
PathFindOnPathW
StrCmpNIW
StrIsIntlEqualW
ChrCmpIW
PathUndecorateA
StrChrIW
PathMakePrettyA
SHCreateStreamOnFileW
UrlGetLocationA
PathQuoteSpacesW
PathStripPathA
PathMakeSystemFolderA
StrCatBuffA
PathIsUNCW
UrlGetPartW
SHRegEnumUSValueW
StrSpnW
PathRenameExtensionW
SHQueryInfoKeyA
SHRegGetUSValueA
UrlEscapeA
PathFindFileNameW
PathIsURLA
SHRegSetUSValueA
PathFindFileNameA
PathQuoteSpacesA
PathGetCharTypeW
SHGetValueA
SHSetValueA
UrlHashA
UrlGetLocationW
UrlCanonicalizeW
SHCreateStreamOnFileA
wvnsprintfA
PathFindSuffixArrayW
PathGetDriveNumberA
PathIsRootW
PathRemoveExtensionA
SHDeleteValueA
PathIsFileSpecW
PathAddExtensionW
PathAddBackslashW
SHEnumKeyExW
SHGetInverseCMAP
PathIsSystemFolderA
UrlCreateFromPathA
PathCommonPrefixW
StrCatBuffW
PathIsDirectoryEmptyA
StrTrimW
advapi32
StartServiceCtrlDispatcherA
ControlService
RegCreateKeyExW
DuplicateTokenEx
SetSecurityDescriptorSacl
LookupAccountSidA
RegUnLoadKeyW
RegOpenKeyW
GetSecurityDescriptorOwner
CryptGetDefaultProviderW
ConvertAccessToSecurityDescriptorW
SetEntriesInAccessListW
GetLengthSid
GetMultipleTrusteeA
RegOpenKeyA
GetMultipleTrusteeOperationW
CryptSetProvParam
BuildTrusteeWithSidW
BuildImpersonateExplicitAccessWithNameA
GetExplicitEntriesFromAclA
SetTokenInformation
CryptGetProvParam
ObjectCloseAuditAlarmA
RegOpenKeyExW
BuildTrusteeWithSidA
ChangeServiceConfigA
RegCreateKeyA
SetNamedSecurityInfoExW
CryptAcquireContextA
SetServiceBits
CreateProcessAsUserA
CryptGetDefaultProviderA
CryptSignHashA
EqualSid
PrivilegedServiceAuditAlarmW
CryptDestroyHash
BuildTrusteeWithNameW
SetFileSecurityW
GetTrusteeTypeW
GetSecurityInfoExA
ClearEventLogW
RegEnumValueA
GetEffectiveRightsFromAclA
SetEntriesInAuditListA
AllocateAndInitializeSid
SetEntriesInAclW
DeleteAce
RegisterEventSourceA
RegEnumKeyExA
EnumDependentServicesA
CryptAcquireContextW
RegSetValueW
GetAclInformation
SetSecurityDescriptorOwner
CryptExportKey
CryptDestroyKey
RegEnumKeyA
QueryServiceLockStatusW
GetSidIdentifierAuthority
SetEntriesInAclA
BuildSecurityDescriptorA
EnumDependentServicesW
InitializeSecurityDescriptor
LookupPrivilegeValueW
OpenServiceW
OpenSCManagerA
AddAccessAllowedAce
CryptGetHashParam
BuildImpersonateTrusteeW
CryptSetProviderW
PrivilegedServiceAuditAlarmA
RegQueryMultipleValuesA
ImpersonateSelf
AreAnyAccessesGranted
TrusteeAccessToObjectA
CryptSetProviderA
LookupSecurityDescriptorPartsW
RegUnLoadKeyA
QueryServiceLockStatusA
RegQueryValueA
RegisterEventSourceW
BackupEventLogW
GetEffectiveRightsFromAclW
OpenBackupEventLogA
IsValidSecurityDescriptor
ObjectDeleteAuditAlarmW
GetNamedSecurityInfoExW
InitializeSid
RegDeleteValueW
CryptSetHashParam
CryptCreateHash
CryptEncrypt
RevertToSelf
CloseServiceHandle
AddAce
StartServiceCtrlDispatcherW
CryptGetKeyParam
GetTrusteeNameA
MapGenericMask
RegDeleteKeyA
CryptEnumProvidersW
CryptImportKey
GetAccessPermissionsForObjectA
ConvertSecurityDescriptorToAccessNamedW
GetTrusteeNameW
OpenProcessToken
RegOpenKeyExA
ReadEventLogW
LogonUserW
RegQueryValueExA
BuildExplicitAccessWithNameA
ClearEventLogA
RegisterServiceCtrlHandlerA
CryptEnumProviderTypesA
FreeSid
GetOldestEventLogRecord
GetKernelObjectSecurity
CloseEventLog
RegRestoreKeyA
InitiateSystemShutdownA
ole32
CreateClassMoniker
OleConvertIStorageToOLESTREAMEx
CoTreatAsClass
CreateDataAdviseHolder
CoMarshalInterThreadInterfaceInStream
ReadStringStream
OleSetClipboard
OleNoteObjectVisible
CoCopyProxy
OleRegEnumFormatEtc
CoGetCallContext
CoRevokeMallocSpy
CoMarshalHresult
MonikerCommonPrefixWith
OleSetMenuDescriptor
CoGetInstanceFromIStorage
CoGetStandardMarshal
CoRevertToSelf
WriteStringStream
UtConvertDvtd16toDvtd32
StgSetTimes
CoRegisterChannelHook
StringFromGUID2
OleGetClipboard
OleGetIconOfFile
CoGetCurrentLogicalThreadId
StringFromCLSID
OleSave
ProgIDFromCLSID
CoCreateFreeThreadedMarshaler
BindMoniker
CoGetCurrentProcess
CreateDataCache
UtGetDvtd16Info
GetConvertStg
CoFreeLibrary
CoCreateInstance
OleMetafilePictFromIconAndLabel
CoRegisterSurrogate
OleIsCurrentClipboard
OleGetAutoConvert
StringFromIID
CreateAntiMoniker
CoGetPSClsid
CoResumeClassObjects
StgOpenStorageOnILockBytes
OleCreateLink
PropVariantCopy
CreateFileMoniker
OleSaveToStream
GetClassFile
StgCreateDocfile
OleCreateMenuDescriptor
UtConvertDvtd32toDvtd16
MkParseDisplayName
CreateItemMoniker
CoCreateGuid
CoGetInstanceFromFile
OleConvertOLESTREAMToIStorage
OleCreateFromDataEx
OleLoad
CoDisconnectObject
IIDFromString
OleSetContainedObject
CoImpersonateClient
CoUninitialize
ReadClassStg
CLSIDFromString
CoFreeUnusedLibraries
CoGetTreatAsClass
OleCreateLinkToFileEx
OleCreateFromFile
OleConvertOLESTREAMToIStorageEx
OleCreateEmbeddingHelper
OleLockRunning
CreatePointerMoniker
OleCreateFromFileEx
CoGetInterfaceAndReleaseStream
OleCreate
StgGetIFillLockBytesOnILockBytes
OpenOrCreateStream
WriteOleStg
CoQueryClientBlanket
CoGetObject
CreateObjrefMoniker
CoFreeAllLibraries
CoInitialize
OleRegGetUserType
user32
IsCharUpperW
MapDialogRect
GetClipboardFormatNameW
UnregisterDeviceNotification
BeginPaint
EditWndProc
LoadMenuIndirectW
GetListBoxInfo
GetMenuDefaultItem
DrawStateA
DlgDirSelectComboBoxExW
CharNextExA
CharToOemBuffA
GetPriorityClipboardFormat
PaintDesktop
DdeCmpStringHandles
SetDoubleClickTime
GetWindowPlacement
GetParent
SendNotifyMessageA
SetMessageQueue
MessageBoxIndirectA
LoadKeyboardLayoutA
RegisterDeviceNotificationW
CopyAcceleratorTableW
CharPrevA
GetAsyncKeyState
IsDlgButtonChecked
CallNextHookEx
LoadKeyboardLayoutW
ChangeMenuW
RegisterClassExA
FindWindowW
DdeQueryNextServer
LoadCursorFromFileW
GetMenuState
EndDialog
GetScrollRange
GetClipboardViewer
InsertMenuW
ExitWindowsEx
DispatchMessageA
GetMessagePos
DdeImpersonateClient
RegisterHotKey
FlashWindow
ImpersonateDdeClientWindow
CharUpperBuffW
EnumDesktopsW
InflateRect
RegisterClipboardFormatA
DdeGetData
SetCursor
WINNLSGetIMEHotkey
CreateWindowStationA
ReuseDDElParam
PeekMessageA
GetClassInfoA
IsDialogMessage
LoadImageW
GetWindowWord
DdeDisconnect
ScrollDC
InsertMenuA
DdeUnaccessData
DialogBoxParamW
ReleaseCapture
MessageBoxW
GetUserObjectSecurity
GetTabbedTextExtentA
GetMenuInfo
CharLowerA
RedrawWindow
GetMessageTime
InvalidateRect
DestroyMenu
CreateIcon
DefDlgProcA
LoadStringA
GetMessageW
PackDDElParam
PostMessageA
GetWindowRect
GetWindowInfo
InvalidateRgn
ValidateRect
DefFrameProcA
CharNextA
EndDeferWindowPos
GrayStringA
DdeFreeDataHandle
GetPropW
GetSysColorBrush
SendMessageW
DrawIconEx
DdeAbandonTransaction
CreateIconIndirect
BroadcastSystemMessageW
GetKBCodePage
CascadeChildWindows
CreateCursor
OemToCharBuffA
SetPropA
GetMenuItemInfoA
LoadMenuIndirectA
BeginDeferWindowPos
SendIMEMessageExW
CreateAcceleratorTableW
DdePostAdvise
ChangeDisplaySettingsExA
GetClassNameW
CreateMDIWindowW
GetClassLongW
GetAncestor
SetProcessWindowStation
ShowOwnedPopups
GetUpdateRect
SetKeyboardState
CreateMenu
GetDlgItemTextW
RemovePropA
DdeAddData
SetWindowTextA
MenuItemFromPoint
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 301B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE