Static task
static1
Behavioral task
behavioral1
Sample
JaffaCakes118_9ae964f32e40d2ff823fb9ba2fdc372c.exe
Resource
win10v2004-20250314-en
General
-
Target
JaffaCakes118_9ae964f32e40d2ff823fb9ba2fdc372c
-
Size
364KB
-
MD5
9ae964f32e40d2ff823fb9ba2fdc372c
-
SHA1
f1cf8c573891bd6fb731fdd867f64ae4fb05b5a2
-
SHA256
8cda85da59758973612de34b615b9e4f022542a7f3d74a16f903eb4ff97896b8
-
SHA512
59d93e8a97f7fefc8f0638cfb77e13205e9a8d63d65f8bacbec166be2af6d50663c65ab5359ba50f93feb85a5c2f252788cf91db49cb9cdd82314f42e7f42d95
-
SSDEEP
6144:OU2zpQgGp+y8/0PCkTETL1bn7YpcLl2vtR2c8OkzYQL6xDypVqi4mic/:rp+yyTL177YpcLl2vtR2c89NL4DynqOh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource JaffaCakes118_9ae964f32e40d2ff823fb9ba2fdc372c
Files
-
JaffaCakes118_9ae964f32e40d2ff823fb9ba2fdc372c.exe windows:4 windows x86 arch:x86
e37c7c2d6b2eb6b402c46fbb4b3ce33e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
gdiplus
GdipGetImageGraphicsContext
GdipGetDC
GdipReleaseDC
GdipCloneImage
GdipSaveImageToFile
GdipCreateFromHDC
GdipDisposeImage
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusShutdown
GdiplusStartup
GdipGetImageWidth
GdipCreateBitmapFromGraphics
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipGetImageHeight
kernel32
EnumResourceLanguagesW
GetVersion
ConvertDefaultLocale
GetCurrentThread
GetPrivateProfileIntW
WritePrivateProfileStringW
GetPrivateProfileStringW
InterlockedIncrement
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalFlags
FindResourceExW
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
RtlUnwind
GetLocaleInfoW
RaiseException
HeapReAlloc
ExitProcess
HeapSize
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
CompareStringA
InterlockedExchange
GetCurrentProcessId
GetFullPathNameW
GetCurrentProcess
FlushFileBuffers
WriteFile
ReadFile
GetThreadLocale
GetProfileIntW
GetModuleHandleA
VirtualProtect
lstrlenA
lstrcmpA
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
LoadLibraryW
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
FreeLibrary
InterlockedDecrement
GetProcAddress
WideCharToMultiByte
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
lstrlenW
MulDiv
SetFilePointer
GetLastError
CloseHandle
GetModuleFileNameW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetModuleHandleW
GetCurrentDirectoryW
SetErrorMode
GetVolumeInformationW
CreateDirectoryW
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
FindFirstFileW
FindClose
user32
EndPaint
SetRect
SetRectEmpty
GetDCEx
GetMessageW
CharUpperW
GetWindowThreadProcessId
PostQuitMessage
ValidateRect
GetSysColorBrush
UnregisterClassW
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetFocus
SetFocus
GetWindowTextLengthW
GetLastActivePopup
SetActiveWindow
GetDlgItem
GetTopWindow
GetMessageTime
GetMessagePos
TrackPopupMenu
GetKeyState
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
BeginPaint
AdjustWindowRectEx
ScreenToClient
EqualRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowPos
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetSysColor
DestroyMenu
InflateRect
CopyRect
UnhookWindowsHookEx
GetMenuItemID
GetMenuItemCount
RegisterHotKey
UnregisterHotKey
ReleaseCapture
SetForegroundWindow
SetCapture
GetActiveWindow
KillTimer
SetTimer
LockWindowUpdate
IsIconic
GetSystemMenu
RemoveMenu
AppendMenuW
DrawIcon
GetSystemMetrics
MessageBoxW
LoadIconW
DestroyWindow
GetParent
GetWindowTextW
PeekMessageW
TranslateMessage
DispatchMessageW
GetForegroundWindow
GetDesktopWindow
IsWindowVisible
UpdateWindow
ClientToScreen
MapWindowPoints
IsRectEmpty
GetWindowLongW
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
SetWindowLongW
ReleaseDC
GetDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
IsWindow
RedrawWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
WindowFromPoint
MapDialogRect
GetAsyncKeyState
UnregisterClassA
IsWindowEnabled
GetClientRect
GetWindowRect
GetWindow
IsChild
WinHelpW
SendMessageW
EnableWindow
LoadCursorW
SetCursor
GetCursorPos
LoadMenuW
GetSubMenu
PostMessageW
GetMenuState
RegisterClassW
gdi32
RestoreDC
PtVisible
RectVisible
TextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
SaveDC
CreatePatternBrush
GetStockObject
CreatePen
PatBlt
CreateRectRgnIndirect
SetRectRgn
CombineRgn
EnumFontFamiliesExW
SelectClipRgn
DeleteObject
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
ExtTextOutW
GetObjectW
BitBlt
GetDeviceCaps
CreateCompatibleDC
CreateDCW
SetMapMode
CreateRectRgn
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
advapi32
RegSetValueExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW
shell32
SHGetMalloc
SHBrowseForFolderW
Shell_NotifyIconW
SHGetFolderPathW
SHGetPathFromIDListW
comctl32
ord17
shlwapi
PathFindExtensionW
PathAppendW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
ole32
CoUninitialize
CoInitialize
oleaut32
VariantInit
VariantChangeType
VariantClear
Sections
.text Size: 200KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rrdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE