Static task
static1
Behavioral task
behavioral1
Sample
ecca7fb317f2dff22e2fbf9ddec0538a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ecca7fb317f2dff22e2fbf9ddec0538a_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
ecca7fb317f2dff22e2fbf9ddec0538a_JaffaCakes118
-
Size
107KB
-
MD5
ecca7fb317f2dff22e2fbf9ddec0538a
-
SHA1
101204e1a5c883ed9c9572eb16cc3c2c499eccbb
-
SHA256
f936a0b12c26beb58a253f5b49892fee162ed84bb17204464e0426933c971319
-
SHA512
6567c32e14109fc4e781c075f72a854ff85e107526ff42d9e61c1832e2c5ea8bbdf54553c3195372e90a0b4d8320c82316e1009839906acaef92e968864cdcf3
-
SSDEEP
3072:cA6lQm9JS0wwTGQmnjOtzqx1j3nXmTrYc7ogCKC1Jf/NZ:c4b/Qmny2Tn+kgC1JfFZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ecca7fb317f2dff22e2fbf9ddec0538a_JaffaCakes118
Files
-
ecca7fb317f2dff22e2fbf9ddec0538a_JaffaCakes118.exe windows:4 windows x86 arch:x86
74602389cfb9d5b363d6a32206a5d161
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glLighti
glColor3uiv
glReadBuffer
glTexEnvf
glColor4d
glLightModelfv
glEnable
glTexParameterf
glColorMaterial
glCallList
glVertex3fv
glTexEnviv
glTexCoord1f
glStencilMask
glTexCoord4fv
glRasterPos2d
glColor4fv
glVertex3dv
glMap2d
glPopClientAttrib
glPopAttrib
glDrawPixels
glVertex2sv
glRasterPos2s
glTexCoord1sv
glStencilOp
glCopyTexImage2D
glNormal3d
glRotatef
glu32
gluOrtho2D
gluTessCallback
gluNurbsCallback
gluNurbsSurface
gluUnProject
gluBuild1DMipmaps
gluQuadricOrientation
gluDisk
gluEndSurface
gluTessVertex
gluGetTessProperty
gluTessProperty
gluTessEndContour
gluBeginSurface
gluBeginTrim
gluDeleteNurbsRenderer
gluPwlCurve
gluPickMatrix
gluTessBeginContour
gluNewQuadric
gluBeginCurve
gluDeleteTess
gluNurbsProperty
gluNurbsCurve
gluGetString
gluPerspective
gluProject
urlmon
CreateFormatEnumerator
kernel32
HeapFree
HeapCreate
RtlUnwind
WriteFile
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
LeaveCriticalSection
GetCPInfo
HeapAlloc
HeapReAlloc
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
LCMapStringW
VirtualFree
GetThreadLocale
HeapDestroy
GetNumberFormatA
IsBadStringPtrA
CreateEventA
GetCPInfoExA
LocalHandle
SetThreadLocale
EnterCriticalSection
GetSystemDefaultLangID
HeapValidate
VirtualProtect
GlobalSize
FoldStringA
PulseEvent
IsValidLocale
GetUserDefaultLCID
HeapSize
DeleteCriticalSection
GlobalAlloc
OpenMutexA
LCMapStringA
LocalFree
GetOEMCP
GetACP
VirtualLock
LocalReAlloc
GetStringTypeW
HeapUnlock
WideCharToMultiByte
SetLocaleInfoA
GetProcAddress
GetModuleHandleA
VirtualAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetVersion
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 385KB - Virtual size: 461KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ