Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_c6de72e97c7697d456f00eab8ae12104.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_c6de72e97c7697d456f00eab8ae12104.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_c6de72e97c7697d456f00eab8ae12104
-
Size
983KB
-
MD5
c6de72e97c7697d456f00eab8ae12104
-
SHA1
0aa4c68da09b10dcedd4382391c22c3eeb07ab12
-
SHA256
61d871919fb7b249e757d5a2ba5fe866809ece0bcadc6f5358a54117a5ff0875
-
SHA512
1b75a1c2fd3d6d95cc59cfe7833e866c2a8d75af286dbd5071ff9a8d6abf8b78784d01192cb5a83bb0f4103a15574ec31d803058ab27f05cda19d18e8b4f9892
-
SSDEEP
24576:GLV+fBlBX6Pm2rzZYGW2PpJX2NOoKR7Xamq1ami:GLEfBHXrZ2hNqOXROXYm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_c6de72e97c7697d456f00eab8ae12104
Files
-
JaffaCakes118_c6de72e97c7697d456f00eab8ae12104.exe windows:4 windows x86 arch:x86
5a76296f0ddc51cc2646da4d59f728c2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
advapi32
RegDeleteKeyA
RegCreateKeyW
RegisterEventSourceA
RegEnumKeyA
InitializeSecurityDescriptor
RegQueryValueA
RegCloseKey
OpenProcessToken
RegEnumValueA
RegDeleteValueW
RegSetValueExW
ReportEventA
AdjustTokenPrivileges
RegQueryInfoKeyA
DeregisterEventSource
RegOpenKeyW
LookupPrivilegeValueA
RegSetValueExA
RegDeleteValueA
SetSecurityDescriptorDacl
RegEnumKeyW
RegQueryValueExA
RegOpenKeyExA
RegQueryValueExW
RegCreateKeyA
RegSetValueA
RegOpenKeyA
RegEnumValueW
RegDeleteKeyW
kernel32
HeapAlloc
SetErrorMode
ExitThread
LoadResource
UnhandledExceptionFilter
CreateThread
VirtualQuery
TlsGetValue
SystemTimeToFileTime
LockResource
SetStdHandle
CreateFileA
FindFirstFileA
TlsSetValue
FreeResource
GetStdHandle
TerminateProcess
FlushInstructionCache
DeleteFileA
HeapCreate
FindClose
GlobalUnlock
GlobalReAlloc
DuplicateHandle
GetLocalTime
GetSystemDefaultLangID
GetLocaleInfoA
GetProcAddress
SetEndOfFile
GetUserDefaultLangID
GetTempFileNameA
LeaveCriticalSection
ReadFile
WaitForSingleObject
IsBadReadPtr
TlsFree
TlsAlloc
GetSystemTime
lstrcpyA
ReleaseSemaphore
GetFullPathNameA
GetACP
ExitProcess
GetStringTypeA
CompareStringA
GlobalAddAtomA
GetCommandLineA
_lclose
GetSystemDefaultLCID
SearchPathA
FindNextFileA
IsBadCodePtr
FlushFileBuffers
CloseHandle
LCMapStringA
GetStringTypeW
ResetEvent
HeapDestroy
CreateEventA
lstrlenA
FreeLibrary
GetCurrentDirectoryA
GetProfileStringA
GetFileType
SetFileAttributesA
GetSystemDirectoryA
GetEnvironmentStringsW
InterlockedDecrement
SetLastError
GetModuleHandleA
GetExitCodeProcess
FormatMessageW
IsDBCSLeadByte
LockFile
SetEnvironmentVariableA
FreeEnvironmentStringsA
GetCurrentProcessId
SetCurrentDirectoryA
_lwrite
GetEnvironmentStrings
GetTempPathA
CreateProcessW
lstrcmpiW
lstrcatA
FindResourceA
GetUserDefaultLCID
InterlockedIncrement
GetCurrentThreadId
GlobalFree
SetHandleCount
SetLocalTime
MulDiv
InitializeCriticalSection
GetStartupInfoA
GetOEMCP
GetFileTime
VirtualAlloc
GetVersionExA
GetStringTypeExA
RtlUnwind
UnlockFile
GetWindowsDirectoryA
RaiseException
RemoveDirectoryA
LCMapStringW
GlobalAlloc
LoadLibraryExA
_lread
GetTimeZoneInformation
SetFileTime
_llseek
CreateDirectoryA
GlobalLock
FreeEnvironmentStringsW
SetFilePointer
HeapSize
WideCharToMultiByte
WriteFile
LoadLibraryA
GetCurrentProcess
VirtualProtect
SetEvent
SizeofResource
GetModuleFileNameW
GetShortPathNameA
GetDriveTypeA
CreateProcessA
CompareStringW
GlobalSize
FormatMessageA
CreateSemaphoreA
HeapReAlloc
EnterCriticalSection
HeapFree
lstrcpynA
GetVolumeInformationA
GetLastError
lstrcmpiA
GetSystemInfo
lstrcmpA
GetFileAttributesA
DeleteCriticalSection
GetTickCount
WinExec
FileTimeToLocalFileTime
GetVersion
MultiByteToWideChar
VirtualFree
Sleep
ResumeThread
GetModuleFileNameA
MoveFileA
GetDateFormatA
FileTimeToSystemTime
GlobalDeleteAtom
GlobalHandle
GetCPInfo
ole32
OleSave
OleLoad
ddraw
DirectDrawEnumerateA
samlib
SamConnect
ws2_32
recv
accept
WSAConnect
user32
GetKeyState
TrackPopupMenu
GetClipboardData
GetLastActivePopup
EndDeferWindowPos
GetSubMenu
wsprintfA
GetMenuItemID
ShowScrollBar
SetCapture
InvalidateRect
GetSystemMetrics
MsgWaitForMultipleObjects
IsChild
DestroyMenu
SubtractRect
CreateIcon
IsDialogMessageA
CheckMenuItem
InvalidateRgn
UpdateWindow
GetClassInfoExA
IsWindowVisible
UnregisterClassA
GetAsyncKeyState
UnhookWindowsHookEx
WindowFromPoint
SetCursorPos
IntersectRect
CallNextHookEx
KillTimer
FillRect
GetKeyboardLayout
EnumClipboardFormats
RemovePropA
SetMenuDefaultItem
SetCaretPos
WinHelpA
LoadBitmapA
GetWindowDC
GetDoubleClickTime
GetCaretBlinkTime
LoadCursorA
MoveWindow
SetActiveWindow
SendDlgItemMessageA
DefWindowProcA
InsertMenuA
GetFocus
DdeCmpStringHandles
MessageBoxIndirectA
DefFrameProcA
CreateCursor
DdeNameService
DeferWindowPos
DdeQueryConvInfo
IsCharAlphaA
GetWindowThreadProcessId
IsIconic
DefMDIChildProcA
DdePostAdvise
GetScrollInfo
CopyAcceleratorTableA
CreateWindowExA
SetWindowTextA
GetWindowRgn
SetPropA
CharToOemA
ClipCursor
DdeQueryStringA
RemoveMenu
GetMessagePos
ShowCursor
SetKeyboardState
GetDC
SetWindowsHookExA
WaitForInputIdle
SystemParametersInfoA
ToAscii
IsClipboardFormatAvailable
SetScrollRange
DrawIcon
PostMessageW
SetRect
LoadStringA
DrawMenuBar
CharToOemBuffA
RegisterClipboardFormatA
AttachThreadInput
IsWindowEnabled
DdeFreeDataHandle
SetFocus
VkKeyScanW
DestroyCursor
DdeClientTransaction
RegisterClassExA
CharLowerBuffA
EndDialog
DdeConnect
EmptyClipboard
GetMenu
TranslateMessage
GetIconInfo
DestroyAcceleratorTable
DestroyWindow
GetClientRect
CopyRect
EndPaint
FindWindowW
EnumThreadWindows
AdjustWindowRectEx
BeginPaint
GetKeyboardState
GetQueueStatus
BeginDeferWindowPos
IsZoomed
ModifyMenuA
SetScrollInfo
SetMenu
GetCaretPos
GetDCEx
AdjustWindowRect
OffsetRect
GetMessageTime
CharUpperA
EnableMenuItem
GetSystemMenu
keybd_event
GetWindowRect
PtInRect
CreateAcceleratorTableA
ReleaseCapture
GetDlgItem
DestroyIcon
SetParent
IsRectEmpty
DispatchMessageA
DeleteMenu
SetWindowRgn
MessageBeep
SetWindowPos
GetWindowLongA
GetDesktopWindow
GetClassInfoA
DdeUninitialize
PeekMessageW
PostQuitMessage
FrameRect
GetMenuStringA
LoadImageA
OemToCharA
CallWindowProcA
CreatePopupMenu
InflateRect
GetCapture
GetMenuItemCount
MapWindowPoints
MessageBoxA
DdeGetLastError
DialogBoxParamA
LoadAcceleratorsA
DdeCreateDataHandle
SetTimer
CloseClipboard
FindWindowA
SetMenuItemInfoA
PostThreadMessageA
DrawFrameControl
GetUpdateRect
GetCursorPos
TranslateMDISysAccel
ReleaseDC
CreateCaret
SetCursor
GetWindow
CharLowerA
ShowCaret
IsWindow
GetCursor
RegisterClassA
GetSysColor
SetWindowsHookExW
SetWindowLongA
EnableWindow
GetClipboardFormatNameA
DdeAbandonTransaction
CharLowerBuffW
DdeSetUserHandle
TabbedTextOutA
CharNextA
SetWindowContextHelpId
SetDlgItemTextA
GetParent
PeekMessageA
HideCaret
DdeCreateStringHandleA
GetMenuItemInfoA
CreateMenu
SetScrollPos
GetMenuState
DrawFocusRect
GetWindowTextLengthA
DestroyCaret
DrawTextA
CreateDialogParamA
ShowWindow
GetScrollPos
GetPropA
OpenClipboard
CharPrevA
GetWindowTextA
CharUpperBuffW
DdeFreeStringHandle
WaitMessage
CharUpperBuffA
LockWindowUpdate
GetUpdateRgn
SendMessageA
SetForegroundWindow
GetForegroundWindow
ClientToScreen
SetClipboardData
ScreenToClient
GetTabbedTextExtentA
GetClassNameA
DdeDisconnect
PostMessageA
GetActiveWindow
DdeInitializeA
VkKeyScanA
LoadIconA
DdeGetData
AppendMenuA
EqualRect
BringWindowToTop
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 12.9MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 556KB - Virtual size: 556KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 403KB - Virtual size: 403KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE