Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_094365902e31ce71635ea4126d5aca90.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
JaffaCakes118_094365902e31ce71635ea4126d5aca90.exe
Resource
win10v2004-20250217-en
General
-
Target
JaffaCakes118_094365902e31ce71635ea4126d5aca90
-
Size
254KB
-
MD5
094365902e31ce71635ea4126d5aca90
-
SHA1
03e3b6f6aba9635c82627a416b7a351f560588b7
-
SHA256
e71d40c62964f1dea43fb1ab8ce44fff971b7e8c2f6497ff01f686b84a22956b
-
SHA512
d4080addf76a4833bf731aa96a3790f75539a5ca16264138cc4feb6726fe14d593b5d3676fbae53f5698b52e2b528361720ed8c9b83d623034664ac38e6e6874
-
SSDEEP
6144:8tXMlItuudNc6ZrvLuHFd12YssRe0E3F9hdSxQUSWg:8BMsdNcYvCH5PssrifhsxQKg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_094365902e31ce71635ea4126d5aca90
Files
-
JaffaCakes118_094365902e31ce71635ea4126d5aca90.exe windows:4 windows x86 arch:x86
d7f3d7a80a5b6938f33336f2bbd47a87
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
OleGetClipboard
CoInitializeEx
CoWaitForMultipleHandles
StringFromCLSID
CoLoadLibrary
CoGetInterfaceAndReleaseStream
GetRunningObjectTable
CoGetCallContext
CoGetMalloc
CreateBindCtx
CoTaskMemAlloc
CoCreateInstance
CreateItemMoniker
CoReleaseMarshalData
StringFromGUID2
OleFlushClipboard
CoCreateGuid
ReleaseStgMedium
CoTaskMemFree
CoMarshalInterface
CoQueryProxyBlanket
OleDuplicateData
CoRevertToSelf
CLSIDFromString
DoDragDrop
RegisterDragDrop
CoRegisterMessageFilter
CoUninitialize
CreateStreamOnHGlobal
CoMarshalInterThreadInterfaceInStream
RevokeDragDrop
CoUnmarshalInterface
CoTaskMemRealloc
CoCreateFreeThreadedMarshaler
CoSetProxyBlanket
CoRegisterClassObject
CoLockObjectExternal
CoInitialize
CoImpersonateClient
CoRevokeClassObject
OleSetClipboard
user32
CreatePopupMenu
PostThreadMessageW
LoadIconW
GetScrollInfo
SetScrollInfo
BeginDeferWindowPos
CallWindowProcW
SetPropW
RedrawWindow
ScreenToClient
MapVirtualKeyW
SendDlgItemMessageW
SetRectEmpty
AppendMenuW
DialogBoxParamW
GetMessagePos
SystemParametersInfoA
SetDlgItemInt
GetWindow
GetCursorPos
TranslateMessage
SetLayeredWindowAttributes
GetDlgItem
GetFocus
CharNextW
GetAsyncKeyState
CloseClipboard
GetWindowTextW
GetKeyboardState
DrawIconEx
CheckMenuItem
GetSysColor
GetWindowTextLengthW
IsWindowVisible
RegisterClassW
UnregisterClassW
MonitorFromPoint
MonitorFromRect
ShowWindow
GetMessageA
TrackPopupMenuEx
DestroyMenu
LoadBitmapW
MoveWindow
SetRect
GetWindowThreadProcessId
IsIconic
IsDialogMessageW
LoadStringW
SetWindowPos
CreateDialogParamW
GetDlgCtrlID
GetSysColorBrush
GetCaretPos
GetDlgItemTextW
GetParent
SetWindowLongW
GetClipboardData
SetWindowTextW
CharUpperBuffW
SendMessageW
PeekMessageW
SendInput
GetMenuStringW
CheckRadioButton
DispatchMessageA
EndDialog
CreateWindowExW
CopyRect
PtInRect
GetClassInfoExW
UnregisterClassA
CheckDlgButton
GetSystemMenu
UpdateLayeredWindow
ReleaseCapture
OpenClipboard
MapDialogRect
RemoveMenu
GetClassNameW
TrackMouseEvent
GetWindowPlacement
EndPaint
GetDlgItemInt
GetKeyState
GetMenu
SetFocus
LoadStringA
SetCaretPos
FillRect
GetWindowDC
DeferWindowPos
EmptyClipboard
GetForegroundWindow
InvalidateRect
GetDC
GetMenuItemCount
EnableWindow
CreateCaret
SetClipboardData
DrawFrameControl
SetTimer
GetMonitorInfoW
DrawTextExW
SetCapture
RemovePropW
GetWindowRect
EnumWindows
IsWindow
SetCursor
GetDesktopWindow
GetClientRect
EndDeferWindowPos
GetActiveWindow
RegisterClassExW
BeginPaint
GetLastActivePopup
MessageBeep
LoadImageW
OffsetRect
IsDlgButtonChecked
SetCursorPos
ScrollWindow
DestroyIcon
RegisterClipboardFormatW
FrameRect
InflateRect
SetParent
RegisterWindowMessageW
IsWindowUnicode
GetDialogBaseUnits
SetDlgItemTextW
DefWindowProcW
GetSystemMetrics
MessageBoxW
ReleaseDC
CharLowerBuffW
GetPropW
PostMessageW
BringWindowToTop
IsWindowEnabled
SetWindowContextHelpId
SystemParametersInfoW
DialogBoxIndirectParamW
IsClipboardFormatAvailable
KillTimer
LoadCursorW
UpdateWindow
IsRectEmpty
GetWindowLongW
GetMessageTime
DestroyWindow
GetMessageW
ClientToScreen
CreateDialogIndirectParamW
AdjustWindowRectEx
ToUnicode
DestroyCaret
DispatchMessageW
SetForegroundWindow
UnionRect
MapWindowPoints
comctl32
ImageList_DrawEx
ImageList_LoadImageW
ImageList_Destroy
ImageList_AddMasked
ImageList_GetIcon
ImageList_Add
ImageList_Create
usp10
ScriptStringAnalyse
ScriptStringFree
ScriptStringOut
shlwapi
StrCmpIW
PathCanonicalizeW
SHAutoComplete
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
oleaut32
SafeArrayUnaccessData
SafeArrayAccessData
VariantInit
VarUI4FromStr
GetErrorInfo
RegisterTypeLi
VariantCopy
VarBstrCmp
SysAllocStringLen
SafeArrayCreate
SafeArrayGetUBound
SafeArrayDestroy
SysStringByteLen
SafeArrayGetDim
SysStringLen
SysAllocString
SafeArrayGetLBound
VariantChangeType
VarBstrCat
LoadTypeLi
SafeArrayGetVartype
SafeArrayLock
SysAllocStringByteLen
SysFreeString
VariantClear
SafeArrayGetElement
UnRegisterTypeLi
SafeArrayUnlock
SysReAllocStringLen
LoadRegTypeLi
SafeArrayPutElement
msimg32
TransparentBlt
AlphaBlend
kernel32
GetThreadLocale
CreateFileW
FreeEnvironmentStringsW
GetComputerNameA
GetComputerNameW
MulDiv
SetHandleInformation
LoadResource
CreateThread
SetFileAttributesW
CreateFileMappingW
PeekNamedPipe
HeapReAlloc
SetFilePointer
LocalFree
EnterCriticalSection
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetShortPathNameW
GetOverlappedResult
GlobalFree
CloseHandle
TlsGetValue
FreeLibraryAndExitThread
Process32NextW
lstrlenW
FindClose
CreateDirectoryW
QueueUserWorkItem
ExitThread
GetPrivateProfileSectionW
TlsSetValue
SetLastError
GetTempPathW
CreateProcessW
GlobalUnlock
GetTimeFormatW
ResumeThread
LocalSize
SizeofResource
MapViewOfFile
UnhandledExceptionFilter
FileTimeToSystemTime
OpenProcess
GlobalAlloc
VirtualAlloc
GetLongPathNameW
lstrcmpiA
SetEnvironmentVariableW
HeapFree
CreateEventW
FindFirstFileW
DeleteCriticalSection
GetCurrentDirectoryW
GetProcessTimes
lstrcmpA
WaitForMultipleObjects
ExpandEnvironmentStringsW
WideCharToMultiByte
SetNamedPipeHandleState
lstrcmpiW
GetModuleHandleA
Process32FirstW
InterlockedPopEntrySList
LeaveCriticalSection
FreeResource
RaiseException
TlsAlloc
LCMapStringW
IsDebuggerPresent
SwitchToThread
CreateMutexW
GlobalLock
DeleteFileW
GetComputerNameExW
WriteFile
DuplicateHandle
GetPrivateProfileIntW
FlushInstructionCache
InterlockedPushEntrySList
GetProcessHeap
WaitForSingleObject
lstrlenA
CancelIo
ResetEvent
ReadProcessMemory
ProcessIdToSessionId
ReadFile
VirtualFree
CreatePipe
HeapAlloc
HeapSize
CreateToolhelp32Snapshot
FormatMessageW
SetFilePointerEx
GetFileSizeEx
FormatMessageA
SetCurrentDirectoryW
TerminateThread
LoadLibraryExW
FindAtomW
LockResource
TlsFree
FindResourceW
WaitNamedPipeW
GetStringTypeExW
OutputDebugStringW
LocalAlloc
GetProfileIntW
LocalReAlloc
FindResourceExW
GetTempFileNameW
GetCurrentThreadId
TransactNamedPipe
FreeLibrary
HeapDestroy
SetUnhandledExceptionFilter
GetDateFormatW
ReleaseMutex
IsProcessorFeaturePresent
GetModuleHandleW
GetSystemInfo
GetStartupInfoW
VirtualAllocEx
advapi32
AddAccessAllowedAce
GetSidSubAuthority
RegEnumValueW
RegCreateKeyExW
LookupPrivilegeNameW
FreeSid
RegConnectRegistryW
CryptReleaseContext
IsValidSid
RegQueryInfoKeyW
PrivilegeCheck
CheckTokenMembership
AdjustTokenPrivileges
SetSecurityDescriptorGroup
CryptGetHashParam
OpenThreadToken
EqualSid
RegOpenKeyExW
SetSecurityDescriptorOwner
RegDeleteKeyW
LookupAccountSidW
RegCloseKey
CryptHashData
GetLengthSid
DuplicateTokenEx
LookupAccountNameW
AccessCheck
LookupPrivilegeValueW
GetSidIdentifierAuthority
DuplicateToken
CryptCreateHash
SetSecurityInfo
SetThreadToken
SetSecurityDescriptorDacl
InitializeAcl
IsValidSecurityDescriptor
CopySid
AddAce
RegDeleteValueW
GetTokenInformation
RegQueryValueExW
OpenProcessToken
CryptDestroyHash
AllocateAndInitializeSid
RegSetValueExW
CryptAcquireContextA
GetUserNameW
GetSecurityInfo
RegEnumKeyExW
GetSidSubAuthorityCount
InitializeSecurityDescriptor
gdi32
CreateDCW
ExtTextOutW
GetDIBColorTable
GetBkColor
GetObjectA
GetTextExtentPoint32W
MoveToEx
GetClipBox
CreatePen
CreatePolygonRgn
Polygon
CreateCompatibleDC
GetTextExtentPointW
GetDeviceCaps
PatBlt
SetDCPenColor
GetTextMetricsW
SetBkMode
SetDIBColorTable
CreateCompatibleBitmap
ExtCreatePen
SetBrushOrgEx
SetStretchBltMode
CombineRgn
BitBlt
Polyline
Rectangle
CreateDIBSection
GetRgnBox
LineTo
SelectObject
CreateFontIndirectW
GetObjectW
SetMapMode
SetBkColor
StretchBlt
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
SetTextColor
GetStockObject
userenv
GetProfileType
UnloadUserProfile
RsopSetPolicySettingStatus
GetAllUsersProfileDirectoryA
GetDefaultUserProfileDirectoryA
FreeGPOListA
RegisterGPNotification
mmcndmgr
DllUnregisterServer
DllCanUnloadNow
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 211KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ