Static task
static1
Behavioral task
behavioral1
Sample
2bdf371bf8113239d3ac9ae6c208b6d9_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
2bdf371bf8113239d3ac9ae6c208b6d9_JaffaCakes118.exe
Resource
win10v2004-20240704-en
General
-
Target
2bdf371bf8113239d3ac9ae6c208b6d9_JaffaCakes118
-
Size
644KB
-
MD5
2bdf371bf8113239d3ac9ae6c208b6d9
-
SHA1
5c6e80d75b165f0dadd5171050987664f0300c9f
-
SHA256
707188f4d8fd85fc847e041955d3dd4afd57b5cbe72a302d3cce85de261afd57
-
SHA512
f4ae9f54239e241e7398ed36a4b028e4e18961d8a42b9e0712c5b1b6cd1a7a1298f6fdde224de76ec910ac572c057955cc81cca4b1c908fad14d952543dff97f
-
SSDEEP
12288:LnVcU1cXj/7npYJY/iOsS9Saft+PrUq0mSm4+kzT3aifcwIuxod9lYw4:LVcXj/7pAiBwkv3/k/ux6fY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2bdf371bf8113239d3ac9ae6c208b6d9_JaffaCakes118
Files
-
2bdf371bf8113239d3ac9ae6c208b6d9_JaffaCakes118.exe windows:5 windows x86 arch:x86
abf73d48d8d139a9bbf5dbb2c8301ec5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
query
??0CDbSelectNode@@QAE@XZ
??0CPerfMon@@QAE@PBG@Z
??0CMetaDataMgr@@QAE@HW4CiVRootTypeEnum@@KPBG@Z
?ParseCatalogURL@@YGJPBGAAV?$XPtrST@G@@1@Z
??1CEventLog@@QAE@XZ
?NotifyWriteRead@CRequestClient@@QAEHPAX0K0KAAK@Z
?QueryVirtualScopeList@CiStorage@@QAEPAVPRcovStorageObj@@K@Z
??0CMmStream@@QAE@KH@Z
?SetPhrase@CContentRestriction@@QAEXPBG@Z
CIBuildQueryTree
??0CDbContentRestriction@@QAE@PBGABUtagDBID@@KK@Z
?AppendListElement@CDbListAnchor@@IAEHPAVCDbCmdTreeNode@@@Z
??1CParseCommandTree@@QAE@XZ
?SkipChar@CMemDeSerStream@@UAEXK@Z
comdlg32
GetFileTitleA
ReplaceTextW
dwLBSubclass
dwOKSubclass
Ssync_ANSI_UNICODE_Struct_For_WOW
ChooseColorW
ReplaceTextA
PrintDlgExA
GetOpenFileNameA
PageSetupDlgW
WantArrows
PrintDlgA
sqlunirl
_IsDialogMessage@8
_GetDlgItemText@16
_RegConnectRegistry_@12
newMultiByteFromWideCharSize
_ReportEvent_@36
_RegQueryValue_@16
_FindWindow_@8
_RegEnumKey_@16
_SHGetFileInfo_@20
_OpenWindowStation_@12
_LoadMenu@8
_CreateNamedPipe_@32
_GetShortPathName_@12
_MoveFile@8
_GetPrivateProfileSection_@16
glmf32
glsNumd
glsNuml
glsHeaderGLRCi
glsGetAllContexts
glsAbortCall
glsFlush
glsULongLow
glsGetCaptureDispatchTable
glsComment
glsGetCurrentContext
glsWriteFunc
glsUTF8toUCS2z
__glsParser_create
glsNumlv
kernel32
SetTimeZoneInformation
InterlockedIncrement
GetPrivateProfileSectionA
OpenFileMappingW
InvalidateConsoleDIBits
SetConsoleCursor
SetFilePointer
BuildCommDCBA
GetComputerNameExA
VerifyVersionInfoA
_hread
VirtualAlloc
GetProcAddress
ExitProcess
user32
GetWindowDC
IsWindow
GetMenu
opengl32
glColor3ubv
glCopyTexImage1D
glScalef
glClearIndex
glNormal3i
wglDeleteContext
glColor3s
glLightiv
glLightModelf
wglCreateContext
glPointSize
glColor4usv
glTexGenfv
Sections
.text Size: 333KB - Virtual size: 333KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 183KB - Virtual size: 182KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idat_97 Size: 123KB - Virtual size: 195KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ