Static task
static1
Behavioral task
behavioral1
Sample
e975d5b29d988929e5ad3a8fa19083d1_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e975d5b29d988929e5ad3a8fa19083d1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
e975d5b29d988929e5ad3a8fa19083d1_JaffaCakes118
-
Size
252KB
-
MD5
e975d5b29d988929e5ad3a8fa19083d1
-
SHA1
b1043250c499ccf0ad56a688ccce662f42386869
-
SHA256
dcff19fc193f1ba63c5dc6f91f00070e6912dcec3868e889fed37102698b554b
-
SHA512
4546b300825fbf51525a01cca24f9f18ef65f36eff7ea3759b5f725fce92cd16ecac8f762b3066eee6930a721e3e72bd3b9a2d8bd80800050e71677ec40f13a8
-
SSDEEP
6144:VmYFCN2tM+gfmkZxuMh2C30rzhDt7nLLzMCZf:VaAMFZxph2CkvhBLn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource e975d5b29d988929e5ad3a8fa19083d1_JaffaCakes118
Files
-
e975d5b29d988929e5ad3a8fa19083d1_JaffaCakes118.exe windows:4 windows x86 arch:x86
54855f3b7bbaaf754928e69435959ae8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringA
SetEndOfFile
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
CreateFileA
FlushFileBuffers
SetStdHandle
MultiByteToWideChar
SetFilePointer
IsBadCodePtr
IsBadReadPtr
CompareStringW
VirtualProtect
GetWindowsDirectoryA
MoveFileA
GetEnvironmentVariableA
lstrlenA
lstrcpynA
GetModuleFileNameA
TerminateThread
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
WriteFile
ReadFile
CloseHandle
GetLastError
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
HeapSize
HeapReAlloc
HeapFree
GetProcAddress
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetCurrentProcess
TerminateProcess
ExitProcess
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapAlloc
RtlUnwind
CreateThread
Sleep
SetEnvironmentVariableA
user32
GetClientRect
MessageBoxA
DispatchMessageA
TranslateMessage
PeekMessageA
SetFocus
ShowWindow
CreateWindowExA
GetSystemMetrics
RegisterClassA
LoadCursorA
LoadIconA
DefWindowProcA
PostQuitMessage
EndPaint
BeginPaint
PostMessageA
GetMessageA
GetDC
gdi32
SwapBuffers
ChoosePixelFormat
SetPixelFormat
advapi32
RegCloseKey
RegCreateKeyA
RegSetValueExA
gdiplus
GdipDrawRectangleI
GdipDeleteGraphics
GdipDisposeImage
GdipGraphicsClear
GdipDrawImageRectI
GdiplusStartup
GdipCreatePen1
GdipDeletePen
GdipDeleteBrush
GdipGetImageGraphicsContext
GdipCreateBitmapFromScan0
GdipDrawImageRect
GdipDeleteFont
GdipFree
GdipAlloc
GdipCloneBrush
GdipCreateSolidFill
GdipClonePen
GdipCreateFromHDC
GdipDeleteFontFamily
GdipCreateFont
GdipCreateFontFamilyFromName
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipCloneImage
GdipGetImageWidth
GdiplusShutdown
GdipGetImageHeight
GdipDrawString
opengl32
glClear
glEnable
glCullFace
glClearColor
glEndList
glNewList
glGenLists
glPopMatrix
glColor4fv
glEnd
glVertex3f
glBegin
glPushMatrix
glColor3f
glGetFloatv
glTexCoord2f
glNormal3f
glPolygonMode
glGetIntegerv
glBindTexture
glTexParameteri
glTexImage2D
glGenTextures
glDisable
glCallList
glViewport
glMatrixMode
glLoadIdentity
glTranslatef
wglCreateContext
wglMakeCurrent
glHint
glu32
gluPerspective
Sections
.text Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ