Static task
static1
Behavioral task
behavioral1
Sample
5d211d0e52bec2a9bd50b7ad118abd61_JaffaCakes118.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
5d211d0e52bec2a9bd50b7ad118abd61_JaffaCakes118.exe
Resource
win10v2004-20240709-en
General
-
Target
5d211d0e52bec2a9bd50b7ad118abd61_JaffaCakes118
-
Size
116KB
-
MD5
5d211d0e52bec2a9bd50b7ad118abd61
-
SHA1
9bab0c5a48fc012111fe6b3d02f2b32bd23308d9
-
SHA256
24b02f5c682af869c85d05c064a8a1858b1545ccd47c3de02a896fc699919da0
-
SHA512
e7b535b8b88f86938c843fb60d05322c655e799bd2c898273b330a5c3ed9eccd929514311f6d7aa7366617c9ef81fd33f473cd3e9d5f347f50cdf90dd737c449
-
SSDEEP
1536:tXGY8BwsKd0Xrueur1fTSjwZJ9ujy78q1K06BXeqgtDE9mTJiCbQBZ:KwseLekTHJUjFq14dmtDE9moCU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5d211d0e52bec2a9bd50b7ad118abd61_JaffaCakes118
Files
-
5d211d0e52bec2a9bd50b7ad118abd61_JaffaCakes118.exe windows:4 windows x86 arch:x86
4fe85bb9b69e81fec7d219efb71c6369
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glBegin
glMatrixMode
glTexParameteri
ole32
CoGetClassObject
CoCreateInstance
OleUninitialize
gdi32
LineTo
CreatePatternBrush
CreateRectRgn
SelectClipRgn
CreateEllipticRgn
oleaut32
OleCreatePropertyFrameIndirect
user32
GetDC
oledlg
ord11
ord2
ord3
msvcrt
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
memcpy
_exit
kernel32
EnterCriticalSection
GetCurrentProcessId
ExitProcess
GetVersion
GetStartupInfoA
LeaveCriticalSection
GetLastError
InterlockedExchange
GetCurrentThreadId
InitializeCriticalSection
InterlockedDecrement
lstrlenA
Sleep
HeapAlloc
VirtualFree
CloseHandle
WaitForSingleObject
GetCurrentThread
InterlockedIncrement
VirtualAlloc
GetTickCount
GetModuleHandleA
GetProcAddress
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 215KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 328B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ