Static task
static1
Behavioral task
behavioral1
Sample
b748710755c1fbac71fc0ff32cf537ef_JaffaCakes118.exe
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
b748710755c1fbac71fc0ff32cf537ef_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
b748710755c1fbac71fc0ff32cf537ef_JaffaCakes118
-
Size
232KB
-
MD5
b748710755c1fbac71fc0ff32cf537ef
-
SHA1
24e07980ec08976c2c621f921939cb9a2b238a05
-
SHA256
4c2394583623a65dad03ecf3dce2d93245a18191840406826712416dcfc47416
-
SHA512
f9b70a4f5070e8eac6a7b2cdbceb26640af5f2b44d3ea229118aff7c59257abb5bfda7f0dd01ecfe7be30ef1a9001be64fd56f3547ea975dd026bb1f3f85bf32
-
SSDEEP
6144:SO+cyUlJom9NlfzjbjKzzG41xNUky+E4Zxwe:W+fzezzG4rNXEixw
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b748710755c1fbac71fc0ff32cf537ef_JaffaCakes118
Files
-
b748710755c1fbac71fc0ff32cf537ef_JaffaCakes118.exe windows:5 windows x86 arch:x86
bd4a7bec82d6c3ae78b5c3566ff5fdeb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
CompareFileTime
GetSystemTime
GetTickCount
GetProcAddress
GetModuleFileNameW
InterlockedIncrement
GetStartupInfoW
GetCurrentProcess
GetCurrentThreadId
GetModuleHandleA
GetModuleFileNameA
IsValidCodePage
GetStartupInfoA
GetVersionExA
QueryPerformanceCounter
GetLocalTime
user32
GetDC
gdi32
ChoosePixelFormat
DescribePixelFormat
opengl32
wglCreateContext
wglMakeCurrent
glEnable
glLightfv
wglDeleteContext
glBlendFunc
shell32
SHBindToParent
msvcrt
_acmdln
_except_handler3
__set_app_type
_onexit
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__dllonexit
_controlfp
memcpy
_exit
_XcptFilter
exit
_initterm
__getmainargs
Sections
.text Size: 226KB - Virtual size: 225KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ