Static task
static1
Behavioral task
behavioral1
Sample
32dfbfd0c25ca1a7c01f427941a8a550_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
32dfbfd0c25ca1a7c01f427941a8a550_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
32dfbfd0c25ca1a7c01f427941a8a550_JaffaCakes118
-
Size
22KB
-
MD5
32dfbfd0c25ca1a7c01f427941a8a550
-
SHA1
195e7ad97edfce5a4fa2865de571367f8c7d3a50
-
SHA256
be001f2012a6c224eca4186cdac34a5b1b3117a7a2038c1f8b9967e52b6da68b
-
SHA512
327bcabce3e87ce1d6e89d17be2e4e695b47b9d8b5be29f83f58ed691604050936170db7a3423f6c49d4fa899adc646ad1c8b67c530cf0292b1edb06cecdbcc3
-
SSDEEP
384:OYplYSEgjr2xJEbDapCGvForcW2imtcIhKqoR+S8yMSGgd6ogZDK6:9plfScnapCGtkcSmeqYR+S8WGo+26
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 32dfbfd0c25ca1a7c01f427941a8a550_JaffaCakes118
Files
-
32dfbfd0c25ca1a7c01f427941a8a550_JaffaCakes118.exe windows:5 windows x86 arch:x86
db89317f15be2b1371b2f6fcb02ee783
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glListBase
glCopyTexImage1D
glIndexubv
glGetMaterialiv
glIndexd
glTexCoord1i
glEvalCoord2dv
wglShareLists
glVertex4fv
glRotated
glNormal3s
glTexParameterfv
glEvalMesh1
glVertex2f
imagehlp
CheckSumMappedFile
SplitSymbols
SymGetSymPrev
UpdateDebugInfoFile
SymGetTypeFromName
StackWalk
SymEnumSymbols
SymMatchString
SymSetSearchPath
UnMapAndLoad
SymSetOptions
SymUnloadModule64
ImageDirectoryEntryToData
SymLoadModule
SymFunctionTableAccess
ImagehlpApiVersion
SymFunctionTableAccess64
msvcp60
?compare@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEHIIPBGI@Z
??_7logic_error@std@@6B@
?is_open@?$basic_ifstream@GU?$char_traits@G@std@@@std@@QBE_NXZ
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??1?$numpunct@D@std@@UAE@XZ
??4ios_base@std@@QAEAAV01@ABV01@@Z
??0?$basic_istringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??_D?$basic_ostringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
?_Init@?$basic_filebuf@DU?$char_traits@D@std@@@std@@IAEXPAU_iobuf@@W4_Initfl@12@@Z
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?seekg@?$basic_istream@GU?$char_traits@G@std@@@std@@QAEAAV12@V?$fpos@H@2@@Z
??0?$moneypunct@G$0A@@std@@QAE@I@Z
?_Global@_Locimp@locale@std@@0PAV123@A
?do_thousands_sep@?$_Mpunct@G@std@@MBEGXZ
?id@?$num_put@GV?$ostreambuf_iterator@GU?$char_traits@G@std@@@std@@@std@@2V0locale@2@A
?thousands_sep@?$numpunct@G@std@@QBEGXZ
?signaling_NaN@?$numeric_limits@D@std@@SADXZ
shlwapi
wvnsprintfA
StrFormatKBSizeW
IntlStrEqWorkerA
StrFromTimeIntervalA
PathIsUNCW
UrlEscapeW
SHQueryInfoKeyA
PathFindOnPathA
StrToInt64ExA
StrCmpNIW
PathCreateFromUrlW
SHSetValueA
SHEnumValueA
UrlIsOpaqueW
kernel32
FindFirstVolumeA
SetDefaultCommConfigA
GlobalDeleteAtom
QueryPerformanceCounter
GetTickCount
VirtualAlloc
SetProcessShutdownParameters
GetCurrentProcessId
WriteConsoleInputA
GetFirmwareEnvironmentVariableA
GetModuleHandleW
RaiseException
GetCurrentThreadId
LoadLibraryA
ReadConsoleW
GetNativeSystemInfo
DosDateTimeToFileTime
RequestWakeupLatency
SetTapePosition
GetTimeFormatA
Sections
.text Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 634B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ