MyCopyMemory
Static task
static1
Behavioral task
behavioral1
Sample
4a3f0372203671d258e6a0e71c13474f_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
4a3f0372203671d258e6a0e71c13474f_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4a3f0372203671d258e6a0e71c13474f_JaffaCakes118
-
Size
829KB
-
MD5
4a3f0372203671d258e6a0e71c13474f
-
SHA1
011cd6eab442bc7d67bd409c5e87ba6ea5cd1078
-
SHA256
174a2c320e65f21803a93eb8f05b4d9856db2218de2be5f39fa665148c11f870
-
SHA512
d952a7b0fd8ce1e126a88d5327185da4fa33462a589feac488c7f9b810cd86f456cf1a974e1747e3008f3c0448c9aac2da96384cc7dc6f919acd5c0da2f61cdf
-
SSDEEP
24576:/uD0BoOQZuHKfSHhdsnMKkyZBFm4wz1zO2:/a0WsK6HTsnTZBA4wRO2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a3f0372203671d258e6a0e71c13474f_JaffaCakes118
Files
-
4a3f0372203671d258e6a0e71c13474f_JaffaCakes118.exe windows:5 windows x86 arch:x86
1583b205f02c7a045727264e5da20dd8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
HeapAlloc
GetProcAddress
VirtualProtect
OpenEventW
WaitForSingleObject
DuplicateHandle
GlobalHandle
SetLastError
FlushFileBuffers
GetCurrentDirectoryW
LocalAlloc
GlobalLock
CreateEventW
HeapFree
FindResourceA
RaiseException
SetThreadPriority
GetStartupInfoW
InterlockedExchange
LCMapStringW
GetPrivateProfileStringW
GlobalFlags
SetHandleCount
HeapDestroy
DisconnectNamedPipe
SearchPathW
lstrcmpiW
GetLastError
VirtualFree
lstrcmpW
GetCommandLineW
GetFileSizeEx
UnhandledExceptionFilter
HeapQueryInformation
GetFileAttributesW
ReadFile
GetConsoleOutputCP
GetWindowsDirectoryW
GetOverlappedResult
CreateDirectoryW
EnterCriticalSection
lstrcpyW
GetFileAttributesExW
LoadResource
GetVersion
FreeEnvironmentStringsW
GetConsoleTitleA
GetTickCount
TerminateProcess
GlobalFindAtomW
GetTempFileNameW
lstrcmpA
GetLocaleInfoW
GetProfileIntW
PeekNamedPipe
LoadLibraryA
GetCPInfo
GetCurrentThreadId
GlobalAlloc
FindFirstFileW
SetFilePointer
GetUserDefaultUILanguage
IsDebuggerPresent
FreeLibrary
ExitProcess
GetOEMCP
CompareStringW
FreeResource
CreateFileW
LocalFree
user32
CreateWindowExW
SetCursor
DestroyCursor
GetUpdateRect
ClientToScreen
ValidateRect
BeginPaint
ExitWindowsEx
GetParent
SendDlgItemMessageW
GetSysColorBrush
SystemParametersInfoW
GetSystemMenu
MapWindowPoints
ShowOwnedPopups
GetDoubleClickTime
GetPropW
EndDeferWindowPos
DefMDIChildProcW
TrackPopupMenu
TabbedTextOutW
GetMessageW
SetRectEmpty
RegisterWindowMessageW
SetRect
GetMenuDefaultItem
IsChild
PeekMessageW
SetClipboardData
EqualRect
ToUnicodeEx
GetNextDlgGroupItem
FrameRect
GetWindowLongW
UnregisterClassW
PostThreadMessageW
GetFocus
UnregisterClassA
CopyAcceleratorTableW
UnhookWindowsHookEx
SetActiveWindow
DrawTextExW
gdi32
OffsetRgn
GetBoundsRect
ScaleViewportExtEx
GetWindowOrgEx
Escape
RectVisible
Rectangle
GetStockObject
StretchDIBits
RestoreDC
Polygon
SetTextAlign
GetClipBox
CombineRgn
DeleteObject
GetTextCharsetInfo
SetDIBColorTable
Ellipse
SelectPalette
SetWindowOrgEx
SetTextColor
SetWindowExtEx
SetROP2
SetBkColor
EnumFontFamiliesExW
ExcludeClipRect
GetLayout
ExtFloodFill
SetPixelV
LPtoDP
SetPixel
SetBkMode
SetMapMode
GetBkMode
advapi32
RegEnumKeyW
GetSecurityDescriptorSacl
RegQueryValueW
OpenProcessToken
RegSetValueExW
RegDeleteValueW
InitializeSecurityDescriptor
CheckTokenMembership
AdjustTokenPrivileges
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegEnumKeyExW
FreeSid
RegDeleteKeyW
RegCreateKeyExW
RegEnumValueW
SetSecurityDescriptorSacl
LookupPrivilegeValueW
SetSecurityDescriptorDacl
RegCloseKey
RegOpenKeyExW
AllocateAndInitializeSid
GetTokenInformation
RegQueryValueExW
shell32
SHGetSpecialFolderPathW
SHGetDiskFreeSpaceExW
SHChangeNotify
DragFinish
SHAppBarMessage
SHBrowseForFolderW
DragQueryFileW
SHGetPathFromIDListW
DuplicateIcon
SHGetFolderPathW
SHGetFolderLocation
SHGetFileInfoW
ShellExecuteW
Shell_NotifyIconW
SHGetDesktopFolder
SHGetSpecialFolderLocation
ShellExecuteExW
ole32
OleDestroyMenuDescriptor
IsAccelerator
OleGetClipboard
OleInitialize
OleFlushClipboard
RevokeDragDrop
OleLockRunning
OleDuplicateData
DoDragDrop
OleCreateMenuDescriptor
OleTranslateAccelerator
OleIsCurrentClipboard
CoRevokeClassObject
CoInitializeEx
CLSIDFromString
CreateStreamOnHGlobal
CoLockObjectExternal
CoRegisterMessageFilter
CoFreeUnusedLibraries
CoInitialize
CoCreateInstance
OleUninitialize
CoCreateGuid
ReleaseStgMedium
CoUninitialize
CoTaskMemAlloc
RegisterDragDrop
CoTaskMemFree
oleaut32
SystemTimeToVariantTime
SysStringLen
VariantClear
SysFreeString
SysAllocStringLen
VariantTimeToSystemTime
SysAllocString
VariantChangeType
VarBstrFromDate
VariantInit
VarBstrCmp
VarBstrCat
SysStringByteLen
SysAllocStringByteLen
shlwapi
PathStripToRootW
PathIsUNCW
PathFindExtensionW
PathFindFileNameW
ord345
PathRemoveFileSpecW
winmm
PlaySoundW
msimg32
TransparentBlt
AlphaBlend
mpr
WNetAddConnection3W
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
oledlg
OleUIBusyW
gdiplus
GdipDeleteGraphics
GdipGetImagePaletteSize
GdipDrawImageI
GdipCreateBitmapFromScan0
GdipAlloc
GdipBitmapLockBits
GdiplusStartup
GdipCloneImage
GdipGetImageHeight
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipDisposeImage
GdipFree
GdipCreateBitmapFromHBITMAP
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipDrawImageRectI
GdipGetImageWidth
GdipCreateFromHDC
GdipSetInterpolationMode
GdiplusShutdown
oleacc
CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow
Exports
Exports
Sections
.text Size: 183KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.sew Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.qew Size: 154KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rew Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tew Size: 154KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dew Size: 286KB - Virtual size: 285KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 57B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ