Static task
static1
Behavioral task
behavioral1
Sample
4c0b38f97b88649fcadbf09ef490ae62_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
4c0b38f97b88649fcadbf09ef490ae62_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
4c0b38f97b88649fcadbf09ef490ae62_JaffaCakes118
-
Size
21KB
-
MD5
4c0b38f97b88649fcadbf09ef490ae62
-
SHA1
545e5e39a187dcc2cfcdd34779a97c75fe2375e1
-
SHA256
0796b781b75db970d5b2ddcded28fccafa43305ae203d26b758fbdb8a78fcca3
-
SHA512
be232803feabc996728fafbdd4b29fe4e71233e163445658a5ee7438546624946f45fa05d29890038e23df926eaab84cc0bcbf258ec253ea2cfd90730ccdb6fe
-
SSDEEP
384:xCvMLyFIb654jQ3r79IkKlkchqvDro0VxlIH81Y/b9tUqAK:aR0m7yDqvPBV0H0Y/bUM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4c0b38f97b88649fcadbf09ef490ae62_JaffaCakes118
Files
-
4c0b38f97b88649fcadbf09ef490ae62_JaffaCakes118.exe windows:5 windows x86 arch:x86
2d2a49a08a74cc5be1059c0225fc396e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ctl3d32
Ctl3dSetStyle
ListWndProc3d
Ctl3dUnregister
EditWndProc3d
Ctl3dDlgProc
Ctl3dUnAutoSubclass
Ctl3dCtlColorEx
Ctl3dWinIniChange
Ctl3dSubclassDlg
Ctl3dEnabled
ComboWndProc3d
Ctl3dUnsubclassCtl
Ctl3dGetVer
Ctl3dDlgFramePaint
Ctl3dSubclassCtlEx
Ctl3dIsAutoSubclass
opengl32
glColor4f
glEdgeFlagv
glNormal3bv
glVertex3sv
wglDeleteContext
wglSwapLayerBuffers
glColor3fv
glAccum
glMap1f
glFlush
glFogfv
glGetTexParameteriv
query
?SetScopePropertiesNoThrow@@YGJPAUICommand@@IPBQBGPBK11@Z
?HTMLEscapeW@@YGXPBGAAVCVirtualString@@K@Z
??0CLangList@@QAE@PAUICiCLangRes@@K@Z
?GetCY@CAllocStorageVariant@@QBE?ATtagCY@@I@Z
?AddArg@CFwEventItem@@QAEXK@Z
?DumpWorkId@@YGJPBGKPAEAAK00K@Z
?Release@CQueryUnknown@@UAGKXZ
??0CFullPropSpec@@QAE@ABV0@@Z
?Accept@CQueryScanner@@QAEXXZ
?VerifyThreadHasAdminPrivilege@@YGXXZ
?IsImpersonated@CImpersonateSystem@@SGHXZ
?SetNumberOfColumns@CCatState@@QAEXI@Z
??0CInternalPropertyRestriction@@QAE@KKABVCStorageVariant@@PAVCRestriction@@@Z
_StartFWCiSvcWork@12
?InitIterator@CPropertyList@@UAEXXZ
?GetI2@CAllocStorageVariant@@QBEFI@Z
kernel32
GetCommTimeouts
GlobalUnlock
ConnectNamedPipe
VerifyVersionInfoA
GetProfileStringW
GetGeoInfoA
WaitNamedPipeA
Process32FirstW
SetThreadPriority
GetConsoleAliasesW
GetCurrentProcess
GetModuleFileNameA
VirtualAlloc
SetCriticalSectionSpinCount
OpenMutexA
EnumCalendarInfoExW
GetNamedPipeHandleStateW
wsnmp32
SnmpDecodeMsg
SnmpSetRetry
SnmpOidCopy
SnmpGetRetransmitMode
SnmpDuplicateVbl
SnmpCreateVbl
SnmpFreeContext
SnmpGetVb
SnmpFreeVbl
SnmpListen
SnmpCountVbl
_SnmpSetAgentAddress@4
SnmpStrToOid
SnmpStrToContext
msoert2
IsPrint
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 620B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ