Static task
static1
Behavioral task
behavioral1
Sample
bff30cc83bb2f43d4b4393250a3fc213_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
bff30cc83bb2f43d4b4393250a3fc213_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
bff30cc83bb2f43d4b4393250a3fc213_JaffaCakes118
-
Size
184KB
-
MD5
bff30cc83bb2f43d4b4393250a3fc213
-
SHA1
409cf5f7cf9cf2e013a9d7b7693d02b0fbbdda5a
-
SHA256
18351799543b9048310b64fb90cdbabe4f7431058e5fbb64ba2e85bd79aa6786
-
SHA512
29b0d90194cbd1ec5543095189040f273e4f424c6ae83bafc80e6b5af38f9ebe36e755cf5f84701f2ef55c3ef05c7f855492e08b99bf04adb05b46022e238158
-
SSDEEP
3072:7c5nHs6QoK9wWdfERBn5GtjYOTA0IUHaZHuk/5rST:7clHs6QZwQKv8YOTA0IUHYdM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bff30cc83bb2f43d4b4393250a3fc213_JaffaCakes118
Files
-
bff30cc83bb2f43d4b4393250a3fc213_JaffaCakes118.exe windows:5 windows x86 arch:x86
3cdae31bc2c34ec8bb504be5760df1fa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetCursorPos
LoadMenuA
GetWindowLongA
GetDlgItem
GetDlgItemTextA
SetDlgItemInt
GetDlgItemInt
PostMessageA
SetWindowPos
GetClientRect
SystemParametersInfoA
UnhookWindowsHookEx
SetWindowsHookExA
DialogBoxParamA
CreateWindowExA
RegisterClassA
GetClassInfoA
CloseClipboard
GetParent
EmptyClipboard
OpenClipboard
GetFocus
GetSubMenu
GetWindowRect
GetDialogBaseUnits
ShowWindow
SetWindowTextA
DestroyWindow
AppendMenuA
GetSystemMenu
IsWindowVisible
GetTopWindow
CreateDialogParamA
ReleaseDC
GetDC
EnableWindow
SendDlgItemMessageA
DefWindowProcA
SetWindowLongA
TrackPopupMenu
DestroyMenu
SendMessageA
wsprintfA
EndDialog
SetClipboardData
MessageBeep
SetDlgItemTextA
CallWindowProcA
wvsprintfA
GetWindowTextA
MapDialogRect
MoveWindow
InvalidateRect
UnregisterClassA
FindWindowA
IsWindow
MessageBoxA
LoadCursorA
SetCursor
GetWindow
DestroyIcon
KillTimer
CheckMenuItem
SetTimer
GetSystemMetrics
SetForegroundWindow
LoadIconA
SetClassLongA
shell32
SHGetPathFromIDListA
ShellExecuteA
DragFinish
DragQueryFileA
DragAcceptFiles
Shell_NotifyIconA
SHBrowseForFolderA
gdi32
LPtoDP
GetTextExtentPoint32A
comdlg32
GetOpenFileNameA
advapi32
RegQueryValueExA
RegCloseKey
RegSetValueExA
DeregisterEventSource
ReportEventA
RegisterEventSourceA
RegDeleteKeyA
RegOpenKeyExA
RegCreateKeyExA
ws2_32
inet_ntoa
inet_addr
htonl
ntohl
htons
recvfrom
closesocket
sendto
socket
getservbyname
gethostname
listen
WSASetLastError
setsockopt
send
WSAAsyncSelect
ntohs
gethostbyname
WSACleanup
WSAStartup
bind
WSAGetLastError
connect
recv
WSACloseEvent
WSAEventSelect
WSACreateEvent
select
getsockname
accept
comctl32
InitCommonControlsEx
iphlpapi
SendARP
kernel32
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
GetCurrentProcessId
QueryPerformanceCounter
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringW
MultiByteToWideChar
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlUnwind
LoadLibraryW
GetTimeZoneInformation
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
ExitProcess
GetProcAddress
GetModuleHandleW
HeapCreate
VirtualAlloc
VirtualFree
LeaveCriticalSection
DeleteCriticalSection
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
LoadLibraryA
SetStdHandle
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
GetCommandLineA
GetDriveTypeA
GetModuleFileNameW
GetStdHandle
GetFileType
WriteConsoleW
HeapReAlloc
ResumeThread
ExitThread
HeapFree
HeapAlloc
HeapSize
SetEndOfFile
GetSystemTimeAsFileTime
GlobalAlloc
GlobalLock
GlobalUnlock
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDateFormatA
FindNextFileA
FindClose
OutputDebugStringA
FormatMessageA
LocalFree
WritePrivateProfileStringA
GetPrivateProfileStringA
SetThreadPriority
SetLastError
GetProcessHeap
CompareStringA
EnterCriticalSection
ReleaseMutex
CloseHandle
FlushFileBuffers
WriteFile
SetFilePointer
Sleep
CreateFileA
GetLocalTime
lstrlenA
GetFileSize
GetTickCount
GetCurrentThreadId
lstrcmpA
lstrcpyA
GetLastError
lstrcatA
lstrcpynA
SetEnvironmentVariableA
GetEnvironmentVariableA
SetProcessWorkingSetSize
GetCurrentProcess
CompareStringW
CreateMutexA
GetFullPathNameA
CreateProcessA
WaitForSingleObject
lstrcmpiA
ResetEvent
GetModuleFileNameA
GetCurrentDirectoryA
GetSystemTime
SetEvent
CreateEventA
WaitForMultipleObjects
DeleteFileA
ReleaseSemaphore
SetCurrentDirectoryA
GetFileAttributesA
CreateSemaphoreA
ReadFile
CreateThread
Sections
.text Size: 130KB - Virtual size: 129KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.NewSec Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE