Static task
static1
Behavioral task
behavioral1
Sample
1488dde81fa50a6c475687cd2d1c244e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
1488dde81fa50a6c475687cd2d1c244e_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
1488dde81fa50a6c475687cd2d1c244e_JaffaCakes118
-
Size
39KB
-
MD5
1488dde81fa50a6c475687cd2d1c244e
-
SHA1
c41fca043df44314de030b73fc337b5c0275cc72
-
SHA256
fda18ee03f9bae6d0d48c37c4dc9690406d84f220e4c44afda0b7d8f01443487
-
SHA512
f1cea2bb79c6ff7c1eacbab1f5f4e399bbbe1a0f435b98afa47ff088c5a0491b1416a514e289da9247caafa85cacbea837bd510cbe5276209c2bf90e4aba8a23
-
SSDEEP
768:kyKSFODVfoFUO3VfGFI3VfaFnVfGF4OTVf8FEcVfYFSZCGIkw6e/9N3quFDkpeyx:deFJMNBgLM/M9beGuypeQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1488dde81fa50a6c475687cd2d1c244e_JaffaCakes118
Files
-
1488dde81fa50a6c475687cd2d1c244e_JaffaCakes118.exe windows:4 windows x86 arch:x86
3046bd2c7907ba44608ac9e3e41386a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
glut32
glutGet
glutSolidSphere
glutSolidCone
glutSolidTorus
glutWireSphere
glutWireCone
glutWireTorus
glutSwapBuffers
glutPostRedisplay
glutInit
glutInitWindowSize
glutInitWindowPosition
glutInitDisplayMode
glutCreateWindow
glutReshapeFunc
glutDisplayFunc
glutKeyboardFunc
glutIdleFunc
glutMainLoop
opengl32
glViewport
glFrustum
glMatrixMode
glLoadIdentity
glClear
glColor3d
glPushMatrix
glTranslated
glRotated
glPopMatrix
glClearColor
glCullFace
glDepthFunc
glEnable
glLightfv
glMaterialfv
kernel32
AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetModuleHandleA
GetProcAddress
SetUnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
exit
free
malloc
memcpy
signal
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 96B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 64B
IMAGE_SCN_MEM_DISCARDABLE
/19 Size: 512B - Virtual size: 198B
IMAGE_SCN_MEM_DISCARDABLE
/35 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_MEM_DISCARDABLE
/47 Size: 1024B - Virtual size: 825B
IMAGE_SCN_MEM_DISCARDABLE
/61 Size: 1024B - Virtual size: 770B
IMAGE_SCN_MEM_DISCARDABLE
/73 Size: 512B - Virtual size: 288B
IMAGE_SCN_MEM_DISCARDABLE
/86 Size: 1024B - Virtual size: 617B
IMAGE_SCN_MEM_DISCARDABLE
/97 Size: 512B - Virtual size: 24B
IMAGE_SCN_MEM_DISCARDABLE