Static task
static1
Behavioral task
behavioral1
Sample
ff8cd6fb05c167f48499a1e491a1e654_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff8cd6fb05c167f48499a1e491a1e654_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
ff8cd6fb05c167f48499a1e491a1e654_JaffaCakes118
-
Size
1.8MB
-
MD5
ff8cd6fb05c167f48499a1e491a1e654
-
SHA1
adc4a6850237a7df916a52b11c9f4d5dcd52df4b
-
SHA256
9da1f4a50f3c9c049ef10195e02c36b7e5295beb279b40d973cba1fd1cf88aa1
-
SHA512
91af3ad28ed76e2ff429d100d4027afb5819ee03374e82253497231b8da03ab579be76c8737c9d9afb10f8dcee733d7c666cc1a510abdafd70fa7952c9b91fa4
-
SSDEEP
24576:bUHorNKHGJTFNWTWXinoxUsNmvb7OWCtxl0SrgnLyFi+/+ZIGuvVTuSeU8rbh5sf:bY3HeXW3no1mz7Ov6N/+/+Sl72hv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff8cd6fb05c167f48499a1e491a1e654_JaffaCakes118
Files
-
ff8cd6fb05c167f48499a1e491a1e654_JaffaCakes118.exe windows:5 windows x86 arch:x86
eb32d3f65ff607dafa5955ad9e7b11f4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempFileNameW
GetTempPathW
GetThreadContext
GetThreadLocale
GetThreadPriority
GetThreadTimes
GetTickCount
GetTimeFormatW
GetTimeZoneInformation
GetUserDefaultLCID
GetUserDefaultLangID
GetUserDefaultUILanguage
GetVersion
GetVersionExA
GetVersionExW
GetVolumeInformationW
GetWindowsDirectoryW
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFree
GlobalHandle
GlobalLock
GlobalMemoryStatus
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSetInformation
HeapSize
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
IsBadReadPtr
IsBadStringPtrW
IsBadWritePtr
IsDBCSLeadByte
IsDBCSLeadByteEx
IsDebuggerPresent
IsValidLocale
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFileTimeToFileTime
LocalFree
LocalSize
LockFile
LockResource
MapViewOfFile
MoveFileExA
MoveFileW
MulDiv
MultiByteToWideChar
OpenEventW
OpenProcess
OutputDebugStringW
ProcessIdToSessionId
QueryDosDeviceW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReadProcessMemory
RemoveDirectoryW
ResetEvent
ResumeThread
RtlUnwind
SearchPathW
SetCommConfig
GetTempFileNameA
SetEndOfFile
SetEvent
SetFileAttributesW
SetFilePointer
SetFileTime
SetLastError
SetProcessWorkingSetSize
SetThreadLocale
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
SwitchToFiber
SwitchToThread
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
Toolhelp32ReadProcessMemory
TryEnterCriticalSection
UnhandledExceptionFilter
UnlockFile
UnmapViewOfFile
UnregisterWait
VerSetConditionMask
VerifyVersionInfoW
VirtualFree
VirtualProtect
VirtualQuery
VirtualQueryEx
WaitForMultipleObjects
WaitForMultipleObjectsEx
WaitForSingleObject
WaitNamedPipeW
WideCharToMultiByte
WinExec
WriteFile
WritePrivateProfileStringW
WriteProcessMemory
_lclose
_lcreat
_llseek
_lopen
_lread
_lwrite
lstrcatA
lstrcatW
lstrcmpA
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrcpyA
lstrcpyW
lstrcpynA
lstrcpynW
lstrlenA
lstrlenW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
IsValidCodePage
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetSystemTimes
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetSystemDirectoryW
GetSystemDefaultUILanguage
GetSystemDefaultLangID
GetStringTypeW
GetStringTypeExW
GetStringTypeExA
GetStdHandle
GetStartupInfoW
GetStartupInfoA
GetShortPathNameW
GetProcAddress
GetPrivateProfileStringW
GetOEMCP
GetModuleHandleW
GetModuleFileNameW
GetLogicalDriveStringsW
GetLocaleInfoW
GetLocalTime
GetLastError
GetFullPathNameW
GetFullPathNameA
GetFileType
GetFileTime
GetFileSize
GetFileInformationByHandle
GetFileAttributesW
GetFileAttributesExW
GetFileAttributesA
GetExitCodeThread
GetExitCodeProcess
GetEnvironmentVariableW
GetDriveTypeW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetConsoleOutputCP
GetConsoleCP
GetComputerNameW
GetComputerNameExW
GetComputerNameA
GetCommandLineW
GetCommandLineA
GetCPInfoExW
GetCPInfo
GetAtomNameW
GetACP
FreeResource
FreeLibrary
FormatMessageW
FlushInstructionCache
FlushFileBuffers
FindResourceW
FindNextFileW
FindFirstFileW
FindClose
FindAtomW
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
ExitThread
ExitProcess
EnumSystemLocalesW
EnumResourceNamesW
EnumResourceLanguagesW
EnumDateFormatsW
EnumCalendarInfoW
EnterCriticalSection
DuplicateHandle
DosDateTimeToFileTime
DisconnectNamedPipe
DeleteFileW
DeleteFileA
DeleteCriticalSection
DeleteAtom
CreateThread
CreateSemaphoreW
CreateProcessW
CreatePipe
CreateNamedPipeW
CreateMutexW
CreateFileW
CreateFileMappingW
CreateFileA
CreateEventW
CreateEventA
CreateDirectoryW
CopyFileW
ConnectNamedPipe
CompareStringW
CompareStringA
CompareFileTime
CloseHandle
Beep
AddAtomW
AddAtomA
GetModuleHandleA
SetErrorMode
SetCurrentDirectoryW
VirtualAlloc
user32
MessageBoxW
MessageBoxIndirectW
MessageBoxIndirectA
MapWindowPoints
MapVirtualKeyExW
MapVirtualKeyA
LookupIconIdFromDirectory
LockWorkStation
LoadImageW
LoadCursorW
LoadCursorFromFileA
LoadBitmapA
KillTimer
IsWindowVisible
IsIconic
InvalidateRect
InflateRect
IMPSetIMEA
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetScrollRange
GetScrollPos
GetScrollInfo
GetKeyboardType
GetIconInfo
GetCursorPos
GetComboBoxInfo
GetClientRect
GetClassNameW
GetCapture
FrameRect
FillRect
EnumWindowStationsW
EnumDisplayMonitors
EnumDesktopsA
EndPaint
MonitorFromWindow
DrawFrameControl
DefWindowProcW
DefWindowProcA
DefMDIChildProcW
DdeQueryStringW
DdeQueryNextServer
CreateMDIWindowW
CreateAcceleratorTableW
CheckMenuRadioItem
CharPrevA
CharNextExA
CallWindowProcW
BeginPaint
ArrangeIconicWindows
AdjustWindowRect
LoadIconA
IsGUIThread
IsMenu
GetMenuCheckMarkDimensions
GetDlgCtrlID
IsCharAlphaNumericW
GetAsyncKeyState
IsWindowEnabled
DrawMenuBar
GetOpenClipboardWindow
CopyIcon
GetActiveWindow
GetParent
GetSystemMetrics
CharNextA
GetMenuItemCount
GetTopWindow
GetDialogBaseUnits
InSendMessage
GetKBCodePage
ShowCaret
OpenDesktopW
PeekMessageW
PostMessageA
PostMessageW
RedrawWindow
RegisterClassA
RegisterClassExW
RegisterClipboardFormatW
ReleaseCapture
ReleaseDC
RemovePropW
ScreenToClient
SendInput
SendMessageW
SetMenuInfo
SetMenuItemBitmaps
SetPropW
SetScrollInfo
SetTimer
SetUserObjectInformationA
SetWindowLongW
SetWindowPos
GetMessagePos
GetCursor
SetWindowRgn
ShowWindow
SystemParametersInfoW
TranslateAccelerator
UpdateWindow
DrawTextW
GetClipboardViewer
GetClipboardData
IsWindowUnicode
DestroyIcon
GetDoubleClickTime
GetForegroundWindow
CloseClipboard
CreatePopupMenu
GetListBoxInfo
WindowFromDC
GetDesktopWindow
GetMessageTime
GetKeyboardLayout
GetShellWindow
DestroyCursor
CharLowerA
LoadCursorFromFileW
GetDC
gdi32
RealizePalette
DeleteColorSpace
WidenPath
EndPath
FillPath
FlattenPath
GetTextAlign
AbortDoc
AddFontResourceW
EndPage
BitBlt
CheckColorsInGamut
CombineRgn
CreateBrushIndirect
CreateColorSpaceW
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreatePalette
CreateRectRgn
CreateSolidBrush
DeleteObject
EnableEUDC
EngCreateSemaphore
EngQueryLocalTime
EnumFontsW
ExcludeClipRect
FONTOBJ_pifi
FONTOBJ_vGetInfo
FrameRgn
GdiAddGlsRecord
GdiAlphaBlend
GdiComment
GdiConvertDC
GdiConvertRegion
GdiGetLocalBrush
GdiGetPageCount
GdiGetSpoolMessage
GetBrushOrgEx
GetCharWidthI
GetClipBox
GetCurrentObject
CreateHalftonePalette
GetDeviceCaps
GetEnhMetaFileA
GetFontUnicodeRanges
GetGlyphOutlineA
GetHFONT
GetICMProfileW
GetLogColorSpaceW
GetNearestPaletteIndex
GetObjectW
GetPaletteEntries
GetPath
GetStockObject
GetTextMetricsW
GetViewportOrgEx
GetWindowExtEx
IntersectClipRect
PolyBezierTo
PolyDraw
PolyPolyline
PolyTextOutW
RectVisible
RemoveFontMemResourceEx
ResizePalette
RestoreDC
STROBJ_dwGetCodePage
SaveDC
SelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetDeviceGammaRamp
SetICMProfileW
SetMiterLimit
SetPaletteEntries
SetROP2
SetStretchBltMode
SetTextColor
SetViewportOrgEx
StretchBlt
StretchDIBits
TextOutW
GetColorSpace
GetFontLanguageInfo
GetROP2
GetPolyFillMode
GetBkColor
StrokePath
DeleteDC
GetObjectType
CreatePatternBrush
GetDIBits
UnrealizeObject
GetTextColor
advapi32
OpenProcessToken
RevertToSelf
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA
ImpersonateLoggedOnUser
GetUserNameW
RegOpenKeyW
shell32
SHFreeNameMappings
Shell_NotifyIconA
ShellExecuteW
ShellAboutA
SHLoadInProc
SHIsFileAvailableOffline
DragAcceptFiles
DragQueryFileA
DragQueryPoint
ExtractIconExA
ord680
SHCreateDirectoryExW
SHEmptyRecycleBinA
WOWShellExecute
SHGetDiskFreeSpaceA
SHGetFolderLocation
SHGetIconOverlayIndexA
SHGetMalloc
SHGetPathFromIDList
SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
ole32
CoCreateInstance
shlwapi
StrCmpNIW
StrRChrIA
StrRStrIA
StrRStrIW
StrChrIW
StrStrW
comctl32
_TrackMouseEvent
wininet
InternetConnectW
InternetCloseHandle
FtpPutFileW
InternetOpenW
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ