Static task
static1
Behavioral task
behavioral1
Sample
0ff43fbc8b87b0051e2230bdb771b530_JaffaCakes118.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0ff43fbc8b87b0051e2230bdb771b530_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
0ff43fbc8b87b0051e2230bdb771b530_JaffaCakes118
-
Size
42KB
-
MD5
0ff43fbc8b87b0051e2230bdb771b530
-
SHA1
7b84d0bec271ea8a5eff4e1160f12703bacb5369
-
SHA256
b74e8a4a9d5045af30d13aaf64f043aa6769fff2e8d6f3ff902b55be420b45ab
-
SHA512
ade3d89be9b81484c7429ab963ade904d3124c2356377897699c107287c3919e31344848beb5cfdc158d65ca51ed808fbe74666913adc2540c97c05b15ac40b7
-
SSDEEP
384:+rZpI/B6OFOOFtyf9wCwMkWHK0JXUUfDNkuXzl4l3g6ZikU7rpv1/NpMBCuU:cZpI/B6OFOOFdC4ubNk8BVvr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0ff43fbc8b87b0051e2230bdb771b530_JaffaCakes118
Files
-
0ff43fbc8b87b0051e2230bdb771b530_JaffaCakes118.exe windows:4 windows x86 arch:x86
d3b977b5b7a26c95cd6d477798c6fa87
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
glut32
glutSwapBuffers
glutPostRedisplay
glutInit
glutInitWindowSize
glutInitWindowPosition
glutInitDisplayMode
glutCreateWindow
glutReshapeFunc
glutDisplayFunc
glutKeyboardFunc
glutIdleFunc
glutMainLoop
glu32
gluCylinder
gluDeleteQuadric
gluLookAt
gluNewQuadric
gluPerspective
kernel32
AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetModuleHandleA
GetProcAddress
SetUnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
cos
exit
free
malloc
memcpy
rand
signal
sin
srand
opengl32
glBegin
glCallList
glClear
glClearColor
glDepthFunc
glDisable
glEnable
glEnd
glEndList
glLightfv
glLoadIdentity
glMaterialfv
glMatrixMode
glNewList
glNormal3f
glPopAttrib
glPopMatrix
glPushAttrib
glPushMatrix
glRotatef
glScalef
glShadeModel
glTranslatef
glVertex3f
glViewport
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 96B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 72B
IMAGE_SCN_MEM_DISCARDABLE
/19 Size: 512B - Virtual size: 328B
IMAGE_SCN_MEM_DISCARDABLE
/35 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_MEM_DISCARDABLE
/47 Size: 1024B - Virtual size: 901B
IMAGE_SCN_MEM_DISCARDABLE
/61 Size: 1024B - Virtual size: 936B
IMAGE_SCN_MEM_DISCARDABLE
/73 Size: 512B - Virtual size: 420B
IMAGE_SCN_MEM_DISCARDABLE
/86 Size: 1024B - Virtual size: 793B
IMAGE_SCN_MEM_DISCARDABLE
/97 Size: 512B - Virtual size: 112B
IMAGE_SCN_MEM_DISCARDABLE