Static task
static1
Behavioral task
behavioral1
Sample
83614e5bac3d1d567e94ac46bb60ea2d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
83614e5bac3d1d567e94ac46bb60ea2d_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
83614e5bac3d1d567e94ac46bb60ea2d_JaffaCakes118
-
Size
823KB
-
MD5
83614e5bac3d1d567e94ac46bb60ea2d
-
SHA1
c9812f1f26689573ee77744a7d5528a398531705
-
SHA256
fc605c16e47cde8d5f5d860e82fe5bd365d7c81410d71aa6c590b6c093bf216f
-
SHA512
e14d5921f7d052c473a51a6de1d03929f32249eb8d8dd193f60fcaf57f5d622681750d3e1632450d5ea41408f073b159f7cbffeb8c18b230edb77b6172544245
-
SSDEEP
24576:tqd2QEshy188oX/RsDipdD0NIZMoXGuH1:nQEshWMPRsGpN0+ZJX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 83614e5bac3d1d567e94ac46bb60ea2d_JaffaCakes118
Files
-
83614e5bac3d1d567e94ac46bb60ea2d_JaffaCakes118.exe windows:5 windows x86 arch:x86
307c9b2b1262b2579ad2512fcd43f469
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GlobalAddAtomA
CompareStringW
LockResource
GetTimeFormatA
HeapFree
TlsGetValue
IsValidCodePage
TlsAlloc
ExitProcess
CloseHandle
GlobalFlags
GetSystemInfo
CompareStringA
InterlockedIncrement
GetLocaleInfoA
LockFile
lstrcmpA
LCMapStringW
FileTimeToLocalFileTime
GetCurrentProcess
GetSystemTimeAsFileTime
GetFullPathNameA
GlobalUnlock
EnumResourceLanguagesA
GetVolumeInformationA
SetUnhandledExceptionFilter
WaitForSingleObject
GetTimeZoneInformation
GetStartupInfoA
GlobalFindAtomA
FreeEnvironmentStringsA
SetThreadPriority
SuspendThread
GetFileSizeEx
GetThreadLocale
GetEnvironmentStringsW
RtlUnwind
QueryPerformanceCounter
GetConsoleCP
InitializeCriticalSection
GlobalHandle
VirtualQuery
InterlockedExchange
LocalReAlloc
GetConsoleOutputCP
GetEnvironmentStrings
CreateThread
lstrlenA
GetACP
WriteConsoleA
CreateEventA
SetHandleCount
LocalAlloc
LocalFree
FindResourceExA
GetCPInfo
MulDiv
SetStdHandle
VirtualAlloc
LoadResource
SetEndOfFile
GetFileAttributesA
GetStringTypeA
ExitThread
HeapAlloc
UnlockFile
GetDateFormatA
LeaveCriticalSection
FormatMessageA
GetModuleHandleW
TerminateProcess
SetLastError
UnhandledExceptionFilter
LCMapStringA
ReadFile
GetCurrentThreadId
FreeLibrary
TlsFree
GetStdHandle
ConvertDefaultLocale
CreateFileA
GetStringTypeW
HeapCreate
ResumeThread
GetLastError
GetModuleFileNameA
GlobalGetAtomNameA
WriteConsoleW
FreeResource
Sleep
GetFileType
DuplicateHandle
FlushFileBuffers
FileTimeToSystemTime
InitializeCriticalSectionAndSpinCount
TlsSetValue
HeapSize
GlobalLock
FindFirstFileA
FindResourceA
WideCharToMultiByte
SetEnvironmentVariableA
SetFilePointer
RaiseException
GetProcAddress
GetCurrentProcessId
WriteFile
GetFileTime
InterlockedDecrement
GlobalDeleteAtom
DeleteFileA
VirtualFree
WritePrivateProfileStringA
SetErrorMode
SizeofResource
GetModuleFileNameW
IsDebuggerPresent
GetDriveTypeA
DeleteCriticalSection
MultiByteToWideChar
GetVersionExA
GlobalReAlloc
GlobalFree
GetCommandLineA
SetEvent
GetTickCount
FreeEnvironmentStringsW
GetConsoleMode
lstrcmpW
HeapReAlloc
GetCurrentDirectoryA
GetCurrentThread
VirtualProtect
ExpandEnvironmentStringsA
GetModuleHandleA
EnterCriticalSection
GetOEMCP
GlobalAlloc
GetFileSize
FindClose
user32
SetWindowTextA
SystemParametersInfoA
GetWindowRect
GetDesktopWindow
SetWindowLongA
SendMessageA
GetClassInfoExA
EnableMenuItem
GetDlgCtrlID
MapWindowPoints
GetLastActivePopup
GetParent
SetCursor
GetClassNameA
GetCapture
InvalidateRect
CallWindowProcA
GetWindowTextA
BeginPaint
EqualRect
GetMessageA
GetNextDlgTabItem
GetWindowTextLengthA
GetSystemMenu
GrayStringA
GetWindowThreadProcessId
CopyAcceleratorTableA
CheckMenuItem
ReleaseCapture
LoadBitmapA
DrawTextA
SetWindowRgn
KillTimer
IsDialogMessageA
IsWindowEnabled
DefWindowProcA
GetMenu
GetSystemMetrics
GetClassLongA
AdjustWindowRectEx
GetMenuItemID
GetKeyState
IntersectRect
CreatePopupMenu
CopyRect
MessageBoxA
RegisterClipboardFormatA
SetWindowPos
CreateDialogIndirectParamA
GetCursorPos
WindowFromPoint
TrackPopupMenu
SetWindowContextHelpId
InvalidateRgn
GetDlgItem
WinHelpA
AppendMenuA
PostMessageA
SetPropA
GetMessagePos
GetActiveWindow
LoadIconA
ReleaseDC
EndDialog
CharUpperA
GetSubMenu
RegisterWindowMessageA
LoadCursorA
ValidateRect
SetCapture
PtInRect
InsertMenuA
RemovePropA
ModifyMenuA
EndPaint
SetForegroundWindow
SetMenuItemBitmaps
PostQuitMessage
DispatchMessageA
GetClientRect
FillRect
GetTopWindow
CallNextHookEx
SetMenu
DrawIcon
GetMenuCheckMarkDimensions
GetWindowDC
GetMenuItemCount
DestroyMenu
GetForegroundWindow
DrawFrameControl
IsWindowVisible
RegisterClassA
DestroyWindow
GetMessageTime
GetAsyncKeyState
SetActiveWindow
PostThreadMessageA
UnhookWindowsHookEx
IsWindow
SetRect
GetSysColorBrush
GetWindowPlacement
IsChild
GetWindow
GetDC
MapDialogRect
EnableWindow
CreateWindowExA
MessageBeep
ScreenToClient
GetClassInfoA
GetPropA
SendDlgItemMessageA
MoveWindow
ClientToScreen
PeekMessageA
SetWindowsHookExA
GetMenuState
IsIconic
GetFocus
TabbedTextOutA
UpdateWindow
CharNextA
GetNextDlgGroupItem
DrawTextExA
ShowWindow
UnregisterClassA
GetWindowLongA
SetTimer
TranslateMessage
IsRectEmpty
RedrawWindow
SetFocus
GetSysColor
OffsetRect
gdi32
SetViewportExtEx
CreatePen
CreateCompatibleDC
CreateFontIndirectA
SetBkMode
GetCurrentPositionEx
PtVisible
GetMapMode
BeginPath
LPtoDP
SelectObject
CreateSolidBrush
RestoreDC
GetClipBox
OffsetViewportOrgEx
DeleteDC
SetTextColor
PathToRegion
StretchBlt
EnumFontFamiliesExA
StrokeAndFillPath
SetViewportOrgEx
SetWindowOrgEx
GetWindowExtEx
SetBkColor
ExtSelectClipRgn
GetObjectA
EndPath
LineTo
GetViewportExtEx
MoveToEx
DPtoLP
SetMapMode
BitBlt
CreateCompatibleBitmap
GetRgnBox
GetTextColor
PolyBezierTo
DeleteObject
Escape
GetBkColor
CreateRectRgnIndirect
ScaleViewportExtEx
SetWindowExtEx
GetStockObject
ScaleWindowExtEx
CreateBitmap
ExtTextOutA
RectVisible
SaveDC
TextOutA
CombineRgn
GetDeviceCaps
comdlg32
GetFileTitleA
advapi32
RegDeleteKeyA
RegOpenKeyExA
RegOpenKeyA
RegEnumKeyA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegQueryValueA
RegCreateKeyExA
shell32
ShellExecuteA
ole32
CreateILockBytesOnHGlobal
CLSIDFromProgID
CoGetClassObject
OleInitialize
CLSIDFromString
OleIsCurrentClipboard
CoTaskMemFree
OleUninitialize
CoRevokeClassObject
StgOpenStorageOnILockBytes
CoRegisterMessageFilter
CoTaskMemAlloc
CoFreeUnusedLibraries
OleFlushClipboard
StgCreateDocfileOnILockBytes
oleaut32
VariantCopy
SysAllocStringLen
SysStringLen
SafeArrayDestroy
SysAllocStringByteLen
VariantTimeToSystemTime
SysAllocString
SysFreeString
SystemTimeToVariantTime
VariantInit
OleCreateFontIndirect
VariantChangeType
VariantClear
comctl32
ord17
shlwapi
PathStripToRootA
PathFindFileNameA
PathIsUNCA
PathFindExtensionA
rpcrt4
UuidCreate
secur32
CompleteAuthToken
oledlg
ord8
Sections
.text Size: 776KB - Virtual size: 775KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.oiu Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bdsh Size: - Virtual size: 5.2MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 57B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ