Static task
static1
Behavioral task
behavioral1
Sample
bb0b5ac3f0b1df5bf9129b0ab62a4c26_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
bb0b5ac3f0b1df5bf9129b0ab62a4c26_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
bb0b5ac3f0b1df5bf9129b0ab62a4c26_JaffaCakes118
-
Size
38KB
-
MD5
bb0b5ac3f0b1df5bf9129b0ab62a4c26
-
SHA1
9822069540f081f4d556ed6294b3c970b94e3f2a
-
SHA256
0afacc918f3464f47b81538ee78b5e084224ae164dacf2971e2482f7434d9141
-
SHA512
c23498ea83a1871daa07d145de22318d462e7c23fe2fda9bfac930f881e518d2d403c6978dba08ac3fa1d4f2c4e820beefe0676d8d8b380e5c0c56318d2bef6a
-
SSDEEP
768:IrMFO9VfjFuOfVf7FrSVfRFqVfDF6OkVfHFt/VfVFGCGIKlNaOPNAec:YPkYNKeYtTJeaOO5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bb0b5ac3f0b1df5bf9129b0ab62a4c26_JaffaCakes118
Files
-
bb0b5ac3f0b1df5bf9129b0ab62a4c26_JaffaCakes118.exe windows:4 windows x86 arch:x86
6e6a6d23b08a902ebb9b1f19a6cc3ecc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
glut32
__glutInitWithExit
__glutCreateWindowWithExit
__glutCreateMenuWithExit
glutGet
glutSolidSphere
glutSolidCone
glutSolidTorus
glutWireSphere
glutWireCone
glutWireTorus
glutSwapBuffers
glutPostRedisplay
glutInitWindowSize
glutInitWindowPosition
glutInitDisplayMode
glutReshapeFunc
glutDisplayFunc
glutKeyboardFunc
glutIdleFunc
glutMainLoop
kernel32
AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetModuleHandleA
GetProcAddress
SetUnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
exit
free
malloc
memcpy
signal
opengl32
glClear
glClearColor
glColor3d
glCullFace
glDepthFunc
glEnable
glFrustum
glLightfv
glLoadIdentity
glMaterialfv
glMatrixMode
glPopMatrix
glPushMatrix
glRotated
glTranslated
glViewport
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 96B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 64B
IMAGE_SCN_MEM_DISCARDABLE
/19 Size: 512B - Virtual size: 198B
IMAGE_SCN_MEM_DISCARDABLE
/35 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_MEM_DISCARDABLE
/47 Size: 1024B - Virtual size: 894B
IMAGE_SCN_MEM_DISCARDABLE
/61 Size: 1024B - Virtual size: 826B
IMAGE_SCN_MEM_DISCARDABLE
/73 Size: 512B - Virtual size: 372B
IMAGE_SCN_MEM_DISCARDABLE
/86 Size: 1024B - Virtual size: 749B
IMAGE_SCN_MEM_DISCARDABLE
/97 Size: 512B - Virtual size: 24B
IMAGE_SCN_MEM_DISCARDABLE