Static task
static1
Behavioral task
behavioral1
Sample
6cbef2a713469f38c45578358cc748f7_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
6cbef2a713469f38c45578358cc748f7_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
6cbef2a713469f38c45578358cc748f7_JaffaCakes118
-
Size
2.1MB
-
MD5
6cbef2a713469f38c45578358cc748f7
-
SHA1
7993b8ed50fa71436d0005482d949c27db0d8768
-
SHA256
e3a37245672ab44658dfcb5660cb0710c1da48243ecb1aafffed32015de42556
-
SHA512
2684c0a288bcb18a1ea487e09ca2fc7765ce30cc6ac0ddfd83d02315b5b2d0224d26cc5f81b07a0373d8d365753f5bc1c8d92a9d1caea0511a0b587dbcf10554
-
SSDEEP
24576:dun/ZCjr/+X+dXL8sCvz9GIjMUUmZ4IOPmLR:duhajtqG6MGImV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6cbef2a713469f38c45578358cc748f7_JaffaCakes118
Files
-
6cbef2a713469f38c45578358cc748f7_JaffaCakes118.exe windows:5 windows x86 arch:x86
469578fdfded2393f09ec79d4d1fb6c8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glBlendFunc
glViewport
glStencilOp
glReadPixels
glClearDepth
glColorMask
glCopyTexImage2D
glDepthFunc
glDrawArrays
glIsEnabled
kernel32
RtlUnwind
GlobalUnlock
VirtualAlloc
HeapReAlloc
ExitProcess
GetEnvironmentStringsW
LeaveCriticalSection
SetFileShortNameW
FileTimeToSystemTime
CreateMutexW
CreateSemaphoreW
GetProfileIntW
GetSystemDirectoryW
GetTempPathW
GetFullPathNameW
DeleteFileW
FindFirstFileW
AreFileApisANSI
GetOEMCP
MultiByteToWideChar
GetConsoleWindow
LCMapStringW
HeapSize
HeapAlloc
GetStringTypeW
OutputDebugStringW
HeapFree
EnterCriticalSection
GetCPInfo
GetACP
IsValidCodePage
IsDebuggerPresent
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
WriteFile
GetModuleFileNameW
GetStartupInfoW
DeleteCriticalSection
GetFileType
GetStdHandle
CreateFileW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
LoadLibraryExW
GetCommandLineW
RaiseException
IsProcessorFeaturePresent
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
GetModuleHandleExW
GetProcAddress
WideCharToMultiByte
GetProcessHeap
user32
DestroyCursor
GetParent
GetWindowLongW
IsRectEmpty
InvertRect
GetWindowContextHelpId
AdjustWindowRectEx
EnumPropsW
GetUpdateRect
BeginPaint
ReleaseDC
LoadStringW
GetMenuItemInfoW
GetMenuItemCount
LoadMenuW
IsWindowEnabled
GetLastInputInfo
ToAscii
GetFocus
GetDialogBaseUnits
GetNextDlgTabItem
GetNextDlgGroupItem
GetClassInfoExW
ExitWindowsEx
PeekMessageW
RegisterWindowMessageW
ActivateKeyboardLayout
TranslateMDISysAccel
GetRawInputBuffer
DdeGetData
GetDC
uxtheme
IsThemeActive
EnableThemeDialogTexture
DrawThemeParentBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeBackground
secur32
TranslateNameW
FreeContextBuffer
FreeCredentialsHandle
advapi32
RegDeleteValueW
RegOpenKeyExW
RegDeleteKeyW
comdlg32
GetSaveFileNameW
FindTextW
ChooseFontW
PageSetupDlgW
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 652KB - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.2km6 Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.d5n2d Size: 213KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dp0272 Size: 245KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.s6kig Size: 428KB - Virtual size: 427KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 363KB - Virtual size: 362KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ