Static task
static1
Behavioral task
behavioral1
Sample
4a4637b1e4b8aa9b826fa2b3ae05f0ea_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
4a4637b1e4b8aa9b826fa2b3ae05f0ea_JaffaCakes118.exe
Resource
win10v2004-20240426-en
General
-
Target
4a4637b1e4b8aa9b826fa2b3ae05f0ea_JaffaCakes118
-
Size
2.0MB
-
MD5
4a4637b1e4b8aa9b826fa2b3ae05f0ea
-
SHA1
2fdf3bbed5a8bcce511f94fa1f8e0805bf78735e
-
SHA256
03384ca7f7898d1bb2f0096b13fddaeff61c17a39753c262b3c15da6b740dc0e
-
SHA512
2aa91c1069b26148c70645fac07f98b4beeb23656d241100327a18ecf9344872662cd134b12e12dcab6c3247848d09142587597fd23286bc50e9b141a15c6a2e
-
SSDEEP
24576:YkrEoK+RMklkjZS2C+RvRWu68lTVE9wrpb:YkhuPfRQwrp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a4637b1e4b8aa9b826fa2b3ae05f0ea_JaffaCakes118
Files
-
4a4637b1e4b8aa9b826fa2b3ae05f0ea_JaffaCakes118.exe windows:5 windows x86 arch:x86
49280ef90d14615aa8c9ceacaf312e67
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glBindTexture
glClearColor
glClearDepth
glCopyTexImage2D
glCopyTexSubImage2D
glDepthFunc
glDepthMask
glDisable
glDrawArrays
glDrawElements
glEnable
glFlush
glGenTextures
glGetError
glGetFloatv
glStencilFunc
glTexImage2D
glViewport
glColorMask
advapi32
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegCreateKeyExW
OpenSCManagerW
user32
LoadAcceleratorsW
IsWindowEnabled
KillTimer
ReleaseCapture
SetFocus
CreatePopupMenu
BeginDeferWindowPos
SetWindowPlacement
SetWindowPos
ShowOwnedPopups
ShowWindow
SendMessageW
PeekMessageW
RemoveMenu
DrawTextW
GetDCEx
RemovePropW
GetClientRect
AdjustWindowRect
AdjustWindowRectEx
GetCursor
InflateRect
IntersectRect
OffsetRect
GetClassNameW
DestroyCursor
LoadIconW
MapDialogRect
IsCharAlphaNumericW
kernel32
FlushFileBuffers
LCMapStringW
GetConsoleCP
HeapSize
HeapReAlloc
HeapAlloc
RtlUnwind
LoadLibraryExW
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
FindResourceExW
EnterCriticalSection
GetOEMCP
IsDebuggerPresent
IsProcessorFeaturePresent
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetStartupInfoW
DeleteCriticalSection
GetFileType
GetStdHandle
GetProcessHeap
GlobalUnlock
VirtualAlloc
HeapFree
GetCurrentProcessId
GetLastError
LeaveCriticalSection
SetEndOfFile
GetCommMask
MulDiv
GetSystemTime
GetSystemTimeAsFileTime
GetSystemInfo
lstrcmpiW
TlsAlloc
LoadLibraryW
CreateProcessW
ExpandEnvironmentStringsW
OutputDebugStringW
CreateFileW
DeleteFileW
CopyFileExW
IsValidCodePage
GetACP
GetCPInfo
MultiByteToWideChar
CompareStringW
GetStringTypeW
WideCharToMultiByte
GetProcAddress
GetCommandLineW
RaiseException
EncodePointer
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
userenv
LeaveCriticalPolicySection
LoadUserProfileW
Sections
.text Size: 91KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 556KB - Virtual size: 7.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.21vi Size: 382KB - Virtual size: 382KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ki4c62 Size: 534KB - Virtual size: 533KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.0eyht8 Size: 419KB - Virtual size: 418KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ