Static task
static1
Behavioral task
behavioral1
Sample
0d8bc73982dbf82384e5fe24320a3656_JaffaCakes118.exe
Resource
win7-20240220-en
General
-
Target
0d8bc73982dbf82384e5fe24320a3656_JaffaCakes118
-
Size
248KB
-
MD5
0d8bc73982dbf82384e5fe24320a3656
-
SHA1
679e5e1386c557b51acc1780809434ae9a6f3684
-
SHA256
484623515f85800e0f53f25dd9a5bedc192975351b4aaa174d2354b632f4216f
-
SHA512
2b82b60b63f88d710cad0c24a7f9234f736be0240d7e5c5bb704f2ccaf355530c6470051a7e44c196d7ec8d98f92508d5430a379eb14ff5b9574d47a0b71aef8
-
SSDEEP
6144:emVoblCdjhzrSt1VqZEd3/m2NOnVSgMK:emehCPrStCEuf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d8bc73982dbf82384e5fe24320a3656_JaffaCakes118
Files
-
0d8bc73982dbf82384e5fe24320a3656_JaffaCakes118.exe windows:4 windows x86 arch:x86
7844b62c378af8c386a511f2307870d7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringA
SetConsoleCtrlHandler
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
FlushFileBuffers
SetEndOfFile
QueryPerformanceFrequency
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetProcAddress
HeapSize
GetCurrentProcess
TerminateProcess
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
GetTickCount
GetModuleFileNameA
SetStdHandle
GetModuleHandleA
HeapDestroy
RaiseException
GetEnvironmentStringsW
QueryPerformanceCounter
CreateFileA
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
ReadFile
WriteFile
CloseHandle
GetLastError
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
RtlUnwind
HeapFree
HeapAlloc
LCMapStringW
user32
EndDialog
GetDlgItemInt
MessageBoxA
ReleaseDC
DestroyWindow
UnregisterClassA
LoadIconA
LoadCursorA
RegisterClassA
ChangeDisplaySettingsA
ShowCursor
AdjustWindowRectEx
CreateWindowExA
ShowWindow
SetForegroundWindow
SetFocus
PeekMessageA
TranslateMessage
DispatchMessageA
DialogBoxParamA
GetDC
SetTimer
PostQuitMessage
KillTimer
InvalidateRect
DefWindowProcA
GetDlgItem
SetWindowTextA
GetWindowTextA
gdi32
SetPixelFormat
SwapBuffers
ChoosePixelFormat
comdlg32
GetOpenFileNameA
advapi32
SetFileSecurityW
opengl32
glPopMatrix
glPushMatrix
glClear
glEnd
glVertex2d
glFlush
glBegin
glTranslatef
glColor3f
glColor4ub
glEndList
glTranslated
glVertex2i
glNewList
glGenLists
glDeleteLists
glCallLists
glScalef
glListBase
glRotatef
wglDeleteContext
wglMakeCurrent
glViewport
glMatrixMode
glLoadIdentity
glOrtho
glClearColor
glClearDepth
glDepthFunc
glEnable
glBlendFunc
glGenTextures
glBindTexture
glTexParameterf
glTexImage2D
wglCreateContext
glTexCoord2f
winmm
PlaySoundA
Sections
.text Size: 96KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ