Static task
static1
Behavioral task
behavioral1
Sample
66c4354581050b20b25a412ef4032d09_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
66c4354581050b20b25a412ef4032d09_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
66c4354581050b20b25a412ef4032d09_JaffaCakes118
-
Size
2.1MB
-
MD5
66c4354581050b20b25a412ef4032d09
-
SHA1
5d68144ff93df1c0f87483bc3314f0e399719636
-
SHA256
4996a8aaa0e7905e17a00d8e84f3ef9ff79860a03a58891bc979fab1f06b3f3c
-
SHA512
0b99abe35322b5b55226cc7d809f6ffa794077430cb7d44187f7c7bdc5a866c98f5bb52f62dbdf6b04309dddd0a815a06ad8cda42ebe012b557cd9c7e9691fa2
-
SSDEEP
24576:ztq261kA27oM1v/HUs8knIkaXBy5AlNBpiLL4yX:ztq2JF/HZ8kndabPi/R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 66c4354581050b20b25a412ef4032d09_JaffaCakes118
Files
-
66c4354581050b20b25a412ef4032d09_JaffaCakes118.exe windows:5 windows x86 arch:x86
0c5c3e4e5b0cfbec4b92e7175d03de77
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
ReleaseMutex
WaitForSingleObject
SetHandleCount
ReadFile
FormatMessageW
lstrcmpW
lstrcmpiW
lstrlenW
HeapSize
GetModuleFileNameW
GetCommandLineW
FindResourceW
FindResourceExW
GetFileAttributesW
IsValidCodePage
GetOEMCP
GetCPInfo
CreateMutexW
VirtualAlloc
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapReAlloc
HeapAlloc
GetStringTypeW
OutputDebugStringW
RtlUnwind
LoadLibraryExW
HeapFree
EnterCriticalSection
GetACP
IsDebuggerPresent
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
CreateFileW
WriteFile
GetStartupInfoW
RaiseException
IsProcessorFeaturePresent
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
advapi32
OpenSCManagerW
opengl32
glBindTexture
glClear
glClearColor
glClearDepth
glColorMask
glCopyTexImage2D
glCopyTexSubImage2D
glDeleteTextures
glDepthFunc
glDepthMask
glDisable
glDrawArrays
glDrawElements
glGenTextures
glGetFloatv
glPixelStorei
glReadPixels
glStencilFunc
glStencilMask
glTexImage2D
glTexParameteri
glTexSubImage2D
secur32
FreeContextBuffer
GetUserNameExW
DeleteSecurityContext
user32
ActivateKeyboardLayout
IsChild
DestroyWindow
EndDeferWindowPos
IsZoomed
GetDlgItem
CharNextW
GetFocus
MsgWaitForMultipleObjectsEx
CreateMenu
GetDC
SetPropW
GetClientRect
SetCursorPos
GetCursorPos
GetClipCursor
SetWindowsHookExW
DrawIconEx
LoadStringW
DdeQueryConvInfo
DdeKeepStringHandle
DdeGetLastError
Sections
.text Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 981KB - Virtual size: 7.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.0ot2 Size: 416KB - Virtual size: 415KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.4o07r Size: 366KB - Virtual size: 366KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.8ad3od Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.9s8c Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ