Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_267a151ecf4125ffb25a9e9361da6d9f.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_267a151ecf4125ffb25a9e9361da6d9f.exe
Resource
win10v2004-20241007-en
General
-
Target
JaffaCakes118_267a151ecf4125ffb25a9e9361da6d9f
-
Size
257KB
-
MD5
267a151ecf4125ffb25a9e9361da6d9f
-
SHA1
99c90a1b70cf5753d143c16c25bbf26ff971ea33
-
SHA256
7109257a01b88188f08344f8180de5e53d89172c2ac7819d25781877252f12ee
-
SHA512
c48fba29b444fd6f0dca30620595c53d75696cd3d95596e23337071ac76899c675d008b5059a665e67ac312bffef2b48e464f89654b0a197a5a0149ff6cc6c06
-
SSDEEP
6144:OLhIF8sA9JclbEFfhBYtczUGVTVxtLJDRS7LbjvolOi1WK1//OgWT:OLmqMEFfEt8vVL5ZRC/jcFl1//Ogs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_267a151ecf4125ffb25a9e9361da6d9f
Files
-
JaffaCakes118_267a151ecf4125ffb25a9e9361da6d9f.exe windows:4 windows x86 arch:x86
ec6a2ddf0e6cdc219f3b8c2f7eb69a58
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteW
gdi32
SetPixel
GetDIBColorTable
DeleteDC
GetPixel
TextOutW
Escape
ExtTextOutW
SetTextColor
CreateSolidBrush
CreatePen
SetMapMode
SetWindowOrgEx
LineTo
BitBlt
RoundRect
RealizePalette
MoveToEx
CreateCompatibleBitmap
GetCurrentObject
GetTextExtentPoint32W
OffsetViewportOrgEx
ScaleWindowExtEx
GetObjectW
CreateFontIndirectW
ScaleViewportExtEx
RestoreDC
GetClipBox
GetDeviceCaps
SetBkMode
CreatePalette
SetViewportExtEx
SetWindowExtEx
DeleteObject
CreateCompatibleDC
GetTextMetricsW
CreateHalftonePalette
SaveDC
CreateBitmap
GetBkColor
SetBkColor
PatBlt
CreatePatternBrush
RectVisible
PtVisible
SelectPalette
GetStockObject
SetViewportOrgEx
SelectObject
shlwapi
PathFindFileNameW
PathFindExtensionW
comctl32
_TrackMouseEvent
kernel32
RaiseException
EnterCriticalSection
lstrcmpA
Beep
LoadLibraryExW
LocalFree
HeapReAlloc
GetConsoleMode
GetConsoleOutputCP
IsDebuggerPresent
GetCommandLineW
lstrlenA
WritePrivateProfileStringW
SetUnhandledExceptionFilter
IsValidCodePage
CloseHandle
CompareStringW
WriteFile
UnhandledExceptionFilter
GlobalDeleteAtom
CreateFileW
GlobalReAlloc
GetModuleHandleW
LCMapStringW
WideCharToMultiByte
GlobalAlloc
GetFileSize
LockResource
GetACP
CreateEventW
EnumResourceLanguagesW
OpenProcess
LeaveCriticalSection
TlsSetValue
ReadFile
GlobalFree
lstrlenW
FreeEnvironmentStringsW
SetLastError
GlobalLock
ConvertDefaultLocale
WriteConsoleW
FormatMessageW
HeapSize
GetOEMCP
GetModuleHandleA
MulDiv
lstrcmpW
VirtualAlloc
ExpandEnvironmentStringsA
GetProcessHeap
CreateFileA
TlsFree
GlobalFindAtomW
GetStdHandle
FreeLibrary
HeapFree
HeapAlloc
LoadResource
CompareStringA
TlsAlloc
SetHandleCount
GetConsoleCP
LocalReAlloc
VirtualFree
GlobalFlags
GetWindowsDirectoryW
GetFileType
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
LocalAlloc
GetSystemTimeAsFileTime
LCMapStringA
TlsGetValue
WriteConsoleA
RtlUnwind
GetComputerNameW
SetStdHandle
GlobalAddAtomW
FindResourceW
GetCurrentThreadId
FreeResource
SetEndOfFile
CreateProcessW
GlobalHandle
SetFilePointer
DeleteCriticalSection
GlobalUnlock
SizeofResource
SetErrorMode
VirtualAllocEx
oleaut32
VariantClear
VariantInit
VariantChangeType
winmm
sndPlaySoundW
advapi32
RegCreateKeyExW
RegSetValueExW
CreateProcessAsUserW
RegQueryValueW
RegCloseKey
LookupAccountSidW
SetSecurityInfo
RegOpenKeyW
AdjustTokenPrivileges
RegDeleteKeyW
RegEnumKeyW
GetSecurityInfo
BuildExplicitAccessWithNameW
RegQueryValueExW
OpenProcessToken
RegOpenKeyExW
SetEntriesInAclW
GetSecurityDescriptorDacl
GetTokenInformation
RegQueryValueExA
LookupPrivilegeValueW
RegOpenKeyExA
GetUserNameW
user32
ShowScrollBar
GetSystemMetrics
GetLastActivePopup
LoadImageW
GetSysColor
SetWindowPos
GetPropW
SetRectEmpty
GetMenuState
GetDlgItem
GetWindowPlacement
EnableWindow
DefWindowProcW
WindowFromPoint
IsIconic
DestroyWindow
BeginPaint
IsWindowEnabled
ReleaseCapture
SetScrollInfo
SetCapture
GetMenuItemCount
InflateRect
ReleaseDC
SetWindowsHookExW
AppendMenuW
UpdateWindow
UnregisterClassW
SendMessageW
PostMessageW
GetKeyState
IsDlgButtonChecked
CallNextHookEx
EnableMenuItem
GetSystemMenu
GetSubMenu
SendDlgItemMessageA
EndPaint
SetActiveWindow
DestroyMenu
CreatePopupMenu
GetForegroundWindow
SystemParametersInfoW
DispatchMessageW
PeekMessageW
RegisterWindowMessageW
GetClassInfoW
TabbedTextOutW
GetWindowRect
GetTopWindow
GetMessageTime
GetSysColorBrush
TrackPopupMenu
GetCapture
CheckDlgButton
GetClassLongW
ValidateRect
GetWindowDC
GetMenu
GetCursorPos
SetScrollPos
GetWindowTextW
CopyRect
TranslateMessage
GetActiveWindow
DrawEdge
GetParent
GetScrollInfo
IsWindow
LoadIconW
PtInRect
CallWindowProcW
AdjustWindowRectEx
FillRect
GetDlgCtrlID
InvertRect
DrawIconEx
SetMenu
SystemParametersInfoA
IsWindowVisible
GetClassNameW
GetWindow
CreateDialogIndirectParamW
GetScrollPos
SetMenuItemBitmaps
CheckMenuItem
IntersectRect
SetTimer
SendDlgItemMessageW
MapWindowPoints
ClipCursor
WinHelpW
KillTimer
GetWindowLongW
GetFocus
ModifyMenuW
MessageBeep
GetMenuItemID
SetForegroundWindow
GetWindowTextLengthW
SetFocus
GetMenuCheckMarkDimensions
GetDoubleClickTime
RegisterClassW
GetMessagePos
GetDesktopWindow
CreateWindowExW
RemovePropW
SetCursor
PostQuitMessage
GetMessageW
GetIconInfo
FrameRect
ClientToScreen
UnhookWindowsHookEx
IsRectEmpty
GetClassInfoExW
GrayStringW
SetPropW
MessageBoxW
LoadStringW
SetWindowLongW
GetNextDlgTabItem
GetClientRect
ShowWindow
MoveWindow
IsDialogMessageW
LoadBitmapW
ScrollWindow
ScreenToClient
LoadCursorW
EndDialog
DrawTextW
DrawTextExW
DrawStateW
SetWindowTextW
CopyIcon
InvalidateRect
DestroyIcon
GetDC
GetWindowThreadProcessId
SetRect
mscms
RegisterCMMW
UnregisterCMMA
EnumColorProfilesW
DeleteColorTransform
GenerateCopyFilePaths
GetCountColorProfileElements
CreateColorTransformW
wiadss
GetLoaderStatus
FindFirstImportDS
FindNextImportDS
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.m Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.G Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.aRiBnC Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BtzMrx Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.X Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 214KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.E Size: 1024B - Virtual size: 979B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zpOMcm Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.kaS Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ