Static task
static1
Behavioral task
behavioral1
Sample
8bb277d21058942f4663f2217947b944_JaffaCakes118.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
8bb277d21058942f4663f2217947b944_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
8bb277d21058942f4663f2217947b944_JaffaCakes118
-
Size
2.3MB
-
MD5
8bb277d21058942f4663f2217947b944
-
SHA1
3f24c1fdca698f2bd23a4ba13263c5280e21501f
-
SHA256
8fbf5e0fd35287bd3d33f56943a4d505fa818ab77cb24dd3b4dedb53dae643f5
-
SHA512
8e355df7d448129b4ea6c5c6256ab4722ce915b0b46d7a9e363bec659bb06c4477a2064b91cf10296983899400f8093e5d257fa97dccf75568e5e8a313b204ec
-
SSDEEP
24576:oNi8c1xMgVBGCbiDcierlUJd2oNOFcf1FFFt8eS:oNiXxMSBbkverlUJQoNkI1FFL1S
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8bb277d21058942f4663f2217947b944_JaffaCakes118
Files
-
8bb277d21058942f4663f2217947b944_JaffaCakes118.exe windows:5 windows x86 arch:x86
4989ca63bd0922d62d94a5cf0fa949ba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glViewport
glTexSubImage2D
glTexParameteri
glTexImage2D
glStencilOp
glStencilMask
glReadPixels
glPixelStorei
glIsEnabled
glGetString
glGetIntegerv
glGetFloatv
glGetError
glGenTextures
glFlush
glEnable
glDrawElements
glDrawArrays
glDisable
glDepthMask
glDepthFunc
glDeleteTextures
glCopyTexSubImage2D
glCopyTexImage2D
glColorMask
glClearDepth
glClear
glBlendFunc
glBindTexture
kernel32
CreateFileW
CloseHandle
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
LCMapStringW
HeapSize
HeapReAlloc
HeapAlloc
OutputDebugStringW
RtlUnwind
LoadLibraryExW
HeapFree
LeaveCriticalSection
FreeResource
GlobalAlloc
GlobalLock
LocalAlloc
LocalFree
VirtualAlloc
WaitForSingleObject
GetSystemTimeAsFileTime
GetLocalTime
FileTimeToLocalFileTime
MapViewOfFile
TlsGetValue
GetModuleHandleW
GetTempPathW
RemoveDirectoryW
GetStringTypeExW
GetStringTypeW
EnumSystemLocalesW
GetCommandLineW
RaiseException
EncodePointer
GetLastError
SetLastError
GetCurrentThreadId
DecodePointer
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
EnterCriticalSection
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsSetValue
TlsFree
IsProcessorFeaturePresent
IsDebuggerPresent
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentProcessId
user32
DestroyWindow
SetDlgItemTextW
GetNextDlgTabItem
AppendMenuW
EndPaint
FillRect
SetRectEmpty
GetWindowThreadProcessId
DestroyIcon
TranslateMDISysAccel
MonitorFromWindow
GetRawInputBuffer
GetMessageTime
ExitWindowsEx
GetMessageW
advapi32
RegQueryInfoKeyW
RegDeleteValueW
userenv
EnterCriticalPolicySection
GetUserProfileDirectoryW
Sections
.text Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 596KB - Virtual size: 6.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xdata Size: 1024B - Virtual size: 724B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.0btln4 Size: 387KB - Virtual size: 386KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.e7wa Size: 405KB - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.2seo Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.i6rmh2 Size: 364KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 376KB - Virtual size: 375KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ