Static task
static1
Behavioral task
behavioral1
Sample
b144119fa5c6d075f630cdf70cc9d58a_JaffaCakes118.exe
Resource
win7-20240508-en
windows7-x64
Behavioral task
behavioral2
Sample
b144119fa5c6d075f630cdf70cc9d58a_JaffaCakes118.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
General
-
Target
b144119fa5c6d075f630cdf70cc9d58a_JaffaCakes118
-
Size
1.3MB
-
MD5
b144119fa5c6d075f630cdf70cc9d58a
-
SHA1
ebe7de346ed3ba081bbb3c4c1c62cf2407f0575e
-
SHA256
3c7f26970b9267c1dcdd581f8883e8f3f0da8c554d740bac39f90334b6890916
-
SHA512
54960be5a7f72801928998d41dd5fe5be58d957669a0557e29a81f3b698df268bc9838c4a28af46e71e456a3f8d7899c1622a021b24c42c707f61890a65f37ec
-
SSDEEP
24576:Njz1ggks66ms2mjq1q2+QPBJssTwZ+W22y0yR7AM5Y9Qhh1fCt4P61w9FuPfgsMb:LvFOfr8NMCNHbx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource b144119fa5c6d075f630cdf70cc9d58a_JaffaCakes118
Files
-
b144119fa5c6d075f630cdf70cc9d58a_JaffaCakes118.exe windows:5 windows x86 arch:x86
da9a093715ad510eb87620b45d553347
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
GetTickCount
CompareStringA
GetVersionExA
MulDiv
CreateFileA
GetFileSize
UnmapViewOfFile
MapViewOfFileEx
SetEvent
CreateEventA
EnumSystemCodePagesW
CreateFileMappingA
GetModuleHandleA
GetProcessHeap
SetEndOfFile
GetLocaleInfoW
CompareStringW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapSize
GetStringTypeW
GetStringTypeA
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
GetACP
FlushFileBuffers
GetCurrentDirectoryA
GlobalAlloc
GetFileType
SetHandleCount
GetConsoleMode
GetConsoleCP
SetLastError
TlsFree
GetModuleFileNameA
VirtualAlloc
VirtualFree
HeapCreate
LCMapStringW
LCMapStringA
GetCPInfo
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
ExitThread
GetSystemTimeAsFileTime
SetConsoleCtrlHandler
GetDriveTypeA
FindClose
FindNextFileA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
HeapReAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
InitializeCriticalSection
MultiByteToWideChar
QueryPerformanceFrequency
GlobalLock
Sleep
QueryPerformanceCounter
TlsAlloc
TlsSetValue
TlsGetValue
CreateThread
GetCurrentThreadId
GetCurrentThread
SetThreadPriority
InterlockedDecrement
InterlockedIncrement
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
SetEnvironmentVariableA
GetEnvironmentVariableA
AttachConsole
GetStdHandle
WriteConsoleW
OutputDebugStringW
ExitProcess
GetSystemPowerStatus
LoadLibraryW
FreeLibrary
GetModuleHandleW
GetFileSizeEx
CreateFileW
ReadFile
WriteFile
SetFilePointerEx
SetErrorMode
SetFilePointer
lstrcatW
lstrlenW
GetModuleFileNameW
CreateDirectoryW
LoadLibraryA
GetProcAddress
GetSystemInfo
GlobalMemoryStatusEx
GetLastError
FormatMessageW
CloseHandle
CreateSemaphoreW
ReleaseSemaphore
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
GetFullPathNameA
InterlockedExchange
user32
SetClassLongA
GetDlgItem
DefWindowProcA
SetWindowsHookExA
GetSysColor
IsDlgButtonChecked
AppendMenuA
DispatchMessageA
UnhookWindowsHookEx
DeferWindowPos
BeginDeferWindowPos
GetSystemMetrics
SetWindowTextA
LoadImageA
MapWindowPoints
UpdateWindow
FindWindowA
GetDlgItemTextA
DialogBoxParamA
EnableMenuItem
CreateWindowExA
GetWindowLongA
MessageBoxA
SetWindowLongA
OffsetRect
GetScrollRange
SendMessageA
GetWindowTextLengthA
GetDesktopWindow
DispatchMessageW
GetWindowDC
FindWindowW
UnregisterDeviceNotification
FillRect
wsprintfA
CallNextHookEx
LoadStringA
CreateWindowExW
RegisterDeviceNotificationW
GetRawInputDeviceInfoA
PeekMessageW
RegisterClassExW
TranslateMessage
UnregisterClassW
GetMessageW
DestroyWindow
SetClipboardData
GetClipboardSequenceNumber
OpenClipboard
EmptyClipboard
GetClipboardData
IsClipboardFormatAvailable
CloseClipboard
IsRectEmpty
CallWindowProcW
ValidateRect
GetPropW
ToUnicode
RegisterClassW
AdjustWindowRectEx
ClipCursor
GetCursorPos
GetWindowLongW
GetAsyncKeyState
GetMenu
GetKeyboardState
EndDeferWindowPos
GetDialogBaseUnits
GetClassLongA
MoveWindow
GetWindowTextLengthW
GetFocus
TrackMouseEvent
SetPropW
GetWindowTextW
DrawIconEx
DrawTextA
GetRawInputDeviceList
SendDlgItemMessageA
PostQuitMessage
SetActiveWindow
GetSystemMenu
DefWindowProcW
GetUpdateRect
GetClassInfoW
GetClientRect
GetKeyState
LoadImageW
SetWindowLongW
CreateIconFromResource
IsIconic
GetRawInputData
SetWindowPos
ShowWindow
SendMessageW
SetWindowTextW
SetWindowRgn
LoadCursorW
GetDoubleClickTime
CreateIconIndirect
SetCursorPos
RegisterRawInputDevices
DestroyIcon
EnumDisplayDevicesW
ChangeDisplaySettingsExW
EnumDisplaySettingsW
DrawTextW
DialogBoxIndirectParamW
GetDC
SystemParametersInfoW
ReleaseDC
EndDialog
SystemParametersInfoA
MapVirtualKeyW
GetKeyboardLayout
ClientToScreen
SetCursor
ScreenToClient
GetWindowRect
GetMessageA
gdi32
CreateCompatibleBitmap
SelectObject
DeleteObject
GetDIBits
CreateDIBSection
DeleteDC
BitBlt
CreateSolidBrush
SetTextColor
GetDeviceCaps
CreateFontIndirectW
GetTextMetricsW
CreateDCW
CreateBitmap
SwapBuffers
SetPixelFormat
ChoosePixelFormat
DescribePixelFormat
GetPixelFormat
CreateRectRgn
CombineRgn
SetDeviceGammaRamp
GetDeviceGammaRamp
GetObjectA
SetTextJustification
CreateRoundRectRgn
StretchDIBits
OffsetRgn
SelectClipRgn
GetCurrentObject
CreateFontA
FrameRgn
MoveToEx
CreateCompatibleDC
shell32
DragFinish
DragQueryFileW
DragAcceptFiles
SHGetMalloc
SHGetSpecialFolderLocation
SHGetFileInfoA
SHCreateShellItem
SHGetFolderPathW
ole32
CoCreateInstance
CoInitializeEx
CoUninitialize
CreateStreamOnHGlobal
oleaut32
SysFreeString
odbc32
ord75
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
gdiplus
GdipFree
GdipAlloc
GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipSaveImageToStream
GdipCreateBitmapFromStream
GdipDisposeImage
winmm
timeEndPeriod
waveOutClose
waveOutGetDevCapsW
timeGetTime
waveOutWrite
timeBeginPeriod
waveOutGetErrorTextW
waveInOpen
waveInGetNumDevs
waveOutUnprepareHeader
waveOutOpen
waveOutGetNumDevs
waveOutPrepareHeader
waveInGetDevCapsW
waveInClose
imm32
ImmGetIMEFileNameA
ImmReleaseContext
ImmGetCompositionStringW
ImmSetCompositionStringW
ImmGetCandidateListW
ImmAssociateContext
ImmNotifyIME
ImmGetContext
shlwapi
PathFileExistsW
SHAutoComplete
msacm32
acmDriverOpen
netapi32
NetShareGetInfo
NetServerGetInfo
NetApiBufferFree
wininet
FtpSetCurrentDirectoryA
InternetConnectA
InternetCloseHandle
InternetOpenA
iphlpapi
CreateIpNetEntry
winscard
SCardEndTransaction
Sections
.text Size: 836KB - Virtual size: 835KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 203KB - Virtual size: 237KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ