Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_056359ef8c0c452a56b124b24925f2cc.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_056359ef8c0c452a56b124b24925f2cc.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_056359ef8c0c452a56b124b24925f2cc
-
Size
257KB
-
MD5
056359ef8c0c452a56b124b24925f2cc
-
SHA1
0fe0eaa1a5b17d2d1e6b01d8b91cf5e5b352d0a2
-
SHA256
5afa08390e76fdad1816aebda24f175af5cec9a8c676d350553ed9307cc70032
-
SHA512
7620dd7107066f86df84176b9d070df9e84fab8bc88dbb83709aafa6748189512ed53abd15ecd41cd5dffa0847c41334798b3facfec3f26f633357dcaec829ba
-
SSDEEP
6144:gnhPrfhPgYxuaMVmaho0+tq/pTNfXwysBVe+xMXQyWIf8kPZ33yMuZixwU8:b8ptqrXwy2/MXQ/EnZnBuZfL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_056359ef8c0c452a56b124b24925f2cc
Files
-
JaffaCakes118_056359ef8c0c452a56b124b24925f2cc.exe windows:4 windows x86 arch:x86
cab98fea258228e44e251eb0910fdfc3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetMalloc
SHBrowseForFolderW
SHGetPathFromIDListW
Shell_NotifyIconW
SHGetSpecialFolderLocation
SHGetDesktopFolder
ShellExecuteW
SHGetFileInfoW
ShellExecuteExW
msimg32
GradientFill
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
wininet
InternetReadFile
InternetGetLastResponseInfoA
InternetCanonicalizeUrlW
InternetSetOptionA
HttpSendRequestA
InternetConnectA
InternetCloseHandle
InternetCombineUrlA
InternetQueryOptionA
HttpQueryInfoA
InternetOpenA
HttpOpenRequestA
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
oleaut32
SysAllocString
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
SysFreeString
user32
DestroyIcon
SetScrollRange
GetDlgCtrlID
LoadCursorW
TabbedTextOutW
GetSysColorBrush
PostMessageA
GetClassLongA
SetTimer
CreateWindowExW
GetParent
GetDC
SetFocus
GetActiveWindow
CharLowerBuffW
GetMenuItemID
DestroyWindow
IsWindowVisible
CallNextHookEx
GetAsyncKeyState
DrawEdge
ScreenToClient
MessageBeep
SendMessageTimeoutA
SendNotifyMessageW
FindWindowW
CheckMenuItem
RegisterWindowMessageW
GetWindowPlacement
EmptyClipboard
UpdateWindow
RegisterClipboardFormatW
LoadImageW
RegisterClassA
keybd_event
GetDesktopWindow
TrackPopupMenu
ClientToScreen
SetWindowRgn
EnableWindow
GetMenuItemCount
SendMessageW
IsChild
GetMessageA
SetParent
InsertMenuW
OpenDesktopW
ScrollWindowEx
IsWindow
CloseClipboard
PostMessageW
TranslateMessage
wsprintfW
DefWindowProcA
LoadIconW
MapVirtualKeyW
BeginPaint
DefWindowProcW
GetMessageW
GetCursorPos
RegisterClassExW
GetIconInfo
MapWindowPoints
SetMenuDefaultItem
GetSubMenu
CreateCursor
GetSysColor
LoadBitmapW
GetWindowTextW
GetWindowLongA
SetScrollInfo
SwitchDesktop
CopyIcon
OpenClipboard
DrawFocusRect
NotifyWinEvent
FillRect
ShowWindow
LoadCursorA
GetSystemMetrics
SendMessageA
DrawFrameControl
EnumClipboardFormats
IsClipboardFormatAvailable
EnableMenuItem
PtInRect
CopyRect
SetWindowsHookExA
ModifyMenuW
GrayStringW
GetMonitorInfoW
SetWindowLongW
DrawIconEx
GetClipboardData
SetWindowLongA
DrawTextW
LoadStringW
CountClipboardFormats
SetThreadDesktop
DrawIcon
AdjustWindowRectEx
GetDoubleClickTime
InflateRect
CallWindowProcW
CreateWindowExA
RegisterClassExA
OffsetRect
MonitorFromWindow
ScrollDC
GetWindow
GetWindowTextLengthW
SetClipboardData
EndPaint
CreateDesktopW
IsIconic
DispatchMessageW
SetForegroundWindow
CloseDesktop
GetWindowThreadProcessId
GetWindowRect
PeekMessageA
IsWindowEnabled
KillTimer
DeferWindowPos
InvertRect
LoadMenuW
MessageBoxW
GetScrollPos
ReleaseDC
SetCapture
GetCapture
GetWindowLongW
WindowFromPoint
DrawTextExW
DispatchMessageA
MoveWindow
GetKeyState
RegisterClassW
CreateIconFromResourceEx
IsWindowUnicode
GetClassNameW
LoadCursorFromFileA
GetScrollInfo
SetCursor
SystemParametersInfoA
GetClientRect
SystemParametersInfoW
RegisterWindowMessageA
InvalidateRect
GetFocus
DrawTextA
GetCaretBlinkTime
UnhookWindowsHookEx
DeleteMenu
GetWindowDC
RedrawWindow
EndDeferWindowPos
SetWindowPos
CharUpperBuffW
BeginDeferWindowPos
ValidateRect
SetScrollPos
ReleaseCapture
urlmon
FindMimeFromData
rpcrt4
NdrConformantArrayUnmarshall
RpcStringBindingParseW
I_RpcGetBuffer
NdrSendReceive
RpcBindingServerFromClient
NdrConformantStringMarshall
RpcStringBindingComposeW
RpcRaiseException
NdrFreeBuffer
UuidCreate
NdrConformantArrayBufferSize
NdrAllocate
RpcStringFreeW
RpcBindingFree
NdrConformantStringUnmarshall
RpcBindingToStringBindingW
NdrGetBuffer
NdrConformantStringBufferSize
RpcBindingFromStringBindingW
NdrServerInitializeNew
NdrConformantArrayMarshall
NdrPointerFree
NdrConvert
NdrClientInitializeNew
psapi
EnumProcessModules
GetModuleFileNameExW
kernel32
FindClose
CloseHandle
WaitNamedPipeW
LoadResource
InitializeCriticalSectionAndSpinCount
OpenEventW
ReadFile
SetThreadLocale
TlsGetValue
HeapFree
SetUnhandledExceptionFilter
lstrcmpiW
DeviceIoControl
GetCurrencyFormatW
LockResource
ReleaseMutex
TerminateThread
EnterCriticalSection
GetNumberFormatW
CreateNamedPipeW
CreateThread
LocalAlloc
GetTempPathA
GetTempFileNameW
ExpandEnvironmentStringsA
FlushFileBuffers
Process32FirstW
OutputDebugStringW
CreateFileW
CreateToolhelp32Snapshot
IsDebuggerPresent
GetPrivateProfileStringW
SystemTimeToFileTime
LeaveCriticalSection
TlsAlloc
ExpandEnvironmentStringsW
GetModuleHandleW
DeleteCriticalSection
WriteFile
lstrcmpW
GetACP
MapViewOfFile
CreateIoCompletionPort
UnhandledExceptionFilter
SetFilePointer
UnmapViewOfFile
GetSystemDirectoryW
GetExitCodeThread
LoadLibraryExW
WaitForMultipleObjects
GetUserDefaultLangID
SetEndOfFile
CreateProcessW
GlobalUnlock
DeleteFileW
SizeofResource
GlobalLock
GetCurrentThreadId
GlobalAlloc
CreateEventA
LocalUnlock
SetLastError
GetUserDefaultLCID
GetWindowsDirectoryW
GetQueuedCompletionStatus
GetDateFormatW
SetProcessWorkingSetSize
GetProcessHeap
DisconnectNamedPipe
LocalFree
CreateFileMappingA
CreateEventW
FindNextFileW
GetSystemTimeAsFileTime
CreateMutexW
MulDiv
GetDiskFreeSpaceExW
FreeLibrary
GetSystemDirectoryA
FindResourceW
WideCharToMultiByte
OpenProcess
ConnectNamedPipe
GetTempPathW
FindResourceA
GetThreadLocale
FileTimeToSystemTime
HeapAlloc
CreateDirectoryW
CopyFileW
WaitForSingleObject
LCMapStringW
GetTimeFormatW
ExitThread
GetFileSize
RaiseException
GetLocalTime
TlsSetValue
FlushViewOfFile
FindFirstFileW
GetShortPathNameW
GetTempFileNameA
Process32NextW
VirtualAllocEx
ole32
StringFromCLSID
CLSIDFromString
CoTaskMemFree
CoCreateGuid
CoCreateInstance
winmm
PlaySoundA
timeSetEvent
timeGetTime
timeKillEvent
timeGetDevCaps
comctl32
ImageList_Draw
ImageList_GetIconSize
ord17
ImageList_GetImageInfo
ImageList_DrawEx
ws2_32
gethostbyname
getservbyname
WSAStartup
inet_addr
getservbyport
inet_ntoa
htons
ntohs
WSAGetLastError
gethostbyaddr
htonl
WSASetLastError
WSACleanup
comdlg32
GetOpenFileNameW
shlwapi
ColorHLSToRGB
PathIsDirectoryW
ColorRGBToHLS
PathCompactPathW
PathFileExistsW
gdi32
GetTextExtentPoint32W
SetPixel
GetWindowOrgEx
SetViewportExtEx
CreateCompatibleBitmap
SaveDC
IntersectClipRect
GetCurrentPositionEx
TextOutW
Polygon
PtVisible
SetWindowExtEx
CreateDIBPatternBrushPt
GetObjectW
CreateBitmap
CreateDIBSection
GetTextAlign
CombineRgn
SetBrushOrgEx
DPtoLP
RectVisible
GetTextExtentPointW
GetTextExtentPoint32A
GetClipBox
CreateHatchBrush
StretchDIBits
SetViewportOrgEx
Rectangle
SetLayout
LPtoDP
StretchBlt
SetWindowOrgEx
CreatePen
SetMapMode
GetPixel
CreateFontA
CreateRectRgnIndirect
SetStretchBltMode
SetTextAlign
DeleteDC
GetCurrentObject
GetTextExtentExPointW
PatBlt
CreateFontIndirectW
CreateSolidBrush
EnumFontFamiliesExA
SetTextColor
ExtTextOutW
GetStockObject
GetMapMode
EnumFontFamiliesExW
CreateCompatibleDC
AddFontMemResourceEx
SetBkMode
Escape
BitBlt
CreatePatternBrush
SelectObject
ExcludeClipRect
DeleteObject
ExtCreatePen
RestoreDC
GetDeviceCaps
GetDIBits
GetWindowExtEx
GetObjectA
SetBkColor
TextOutA
GetTextMetricsA
GetViewportExtEx
CreateRoundRectRgn
advapi32
RegOpenKeyExA
RegOpenKeyW
FreeSid
RegOpenKeyExW
SetSecurityDescriptorDacl
RegQueryValueExW
GetLengthSid
InitializeSecurityDescriptor
AllocateAndInitializeSid
RegQueryValueExA
AddAccessAllowedAce
RegEnumValueW
InitializeAcl
GetTokenInformation
RegCloseKey
IsTextUnicode
OpenSCManagerW
OpenProcessToken
CloseServiceHandle
EqualSid
OpenThreadToken
OpenServiceW
RegEnumKeyExW
mscms
CreateProfileFromLogColorSpaceW
UnregisterCMMW
GetColorProfileElementTag
InternalSetDeviceConfig
GetNamedProfileInfo
UnregisterCMMA
GetCountColorProfileElements
sendmail
DllCanUnloadNow
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.V Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.qydy Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zlAs Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Wchmki Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vKqb Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.i Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.OCSmsA Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jgi Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 212KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.RWGB Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.apjK Size: 512B - Virtual size: 611B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 476B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ