Static task
static1
Behavioral task
behavioral1
Sample
35db274b03b84b0fee3699d71e8795a2_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
35db274b03b84b0fee3699d71e8795a2_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
35db274b03b84b0fee3699d71e8795a2_JaffaCakes118
-
Size
120KB
-
MD5
35db274b03b84b0fee3699d71e8795a2
-
SHA1
75824bf28d9bf3c480db8bb21ef2e57febb7ad53
-
SHA256
5aae0082e125cb6d92cc13167fba6c5a27618312f6b6fbc9765242445f5d25cf
-
SHA512
35ac2c3a0a700cd240d4e2230879d53a8a61761eee5af8b84ff848ace31c403f17bc5a29ce0c63045739cae5db0f24826bf147d14009613730624b5a5e35cff7
-
SSDEEP
3072:KvgE4nH4gvZW6RRGOXbhrZUpmDX0mjYN3ffnUwY+gZxj:+gYgvZL/VhNU9mjsHrY+gfj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35db274b03b84b0fee3699d71e8795a2_JaffaCakes118
Files
-
35db274b03b84b0fee3699d71e8795a2_JaffaCakes118.exe windows:5 windows x86 arch:x86
37f0e4e3d85bb99ea5ec3e27070fa287
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
oleaut32
SysFreeString
user32
MessageBoxA
UnregisterClassA
TranslateMessage
ShowWindow
ShowCursor
SetWindowTextA
SetWindowPos
SetForegroundWindow
SetFocus
SetCursorPos
SendMessageA
SendDlgItemMessageA
ScreenToClient
ReleaseDC
RegisterClassA
PostQuitMessage
PostMessageA
PeekMessageA
MessageBoxA
LoadIconA
LoadCursorA
GetWindowRect
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
EnumDisplaySettingsA
EndDialog
DispatchMessageA
DialogBoxParamA
DestroyWindow
DefWindowProcA
CreateWindowExA
ClientToScreen
ChangeDisplaySettingsA
AdjustWindowRectEx
kernel32
HeapFree
HeapReAlloc
HeapAlloc
GetProcessHeap
GetCurrentThreadId
MultiByteToWideChar
GetModuleFileNameW
GetCommandLineW
FreeLibrary
ExitProcess
WriteFile
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
TlsSetValue
TlsGetValue
LocalAlloc
GetModuleHandleW
WriteFile
WaitForSingleObject
Sleep
SizeofResource
SetThreadPriority
SetFilePointer
ReadFile
QueryPerformanceFrequency
QueryPerformanceCounter
LockResource
LoadResource
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GetProcAddress
GetModuleFileNameA
GetLocalTime
GetLastError
GetFileSize
GetCommandLineA
FreeLibrary
FindResourceA
EnterCriticalSection
DeleteCriticalSection
CreateThread
CreateFileA
CloseHandle
opengl32
wglGetProcAddress
glViewport
glVertexPointer
glVertex3f
glVertex2f
glTranslatef
glTexParameterf
glTexImage2D
glTexGeni
glTexCoordPointer
glTexCoord2f
glShadeModel
glScalef
glRotatef
glRasterPos2f
glPushMatrix
glPushAttrib
glPopMatrix
glPopAttrib
glPolygonMode
glOrtho
glNormalPointer
glNormal3f
glMatrixMode
glMaterialfv
glLoadIdentity
glLineWidth
glLightfv
glLightModelfv
glGetTexImage
glTexParameteri
glMateriali
glGetFloatv
glGenTextures
glGenLists
glFrustum
glFlush
glEnd
glEnableClientState
glEnable
glDrawElements
glDisableClientState
glDisable
glDepthMask
glDepthFunc
glDeleteTextures
glDeleteLists
glCopyTexSubImage2D
glColorPointer
glColorMaterial
glColor4fv
glColor3fv
glColor3f
glClearColor
glClear
glCallList
glBlendFunc
glBindTexture
glBegin
wglUseFontBitmapsA
wglMakeCurrent
wglDeleteContext
wglCreateContext
gdi32
SwapBuffers
SetPixelFormat
SelectObject
GetDeviceCaps
DeleteObject
CreateFontA
ChoosePixelFormat
shell32
ShellExecuteA
wininet
InternetCloseHandle
InternetReadFile
InternetQueryDataAvailable
InternetOpenUrlA
InternetSetStatusCallback
InternetOpenA
winmm
joyGetDevCapsA
joyGetPosEx
joyGetNumDevs
timeEndPeriod
timeBeginPeriod
Sections
.text Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 60KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ