Static task
static1
Behavioral task
behavioral1
Sample
ef2944c46a9c05c9281585374eebdfb5_JaffaCakes118.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ef2944c46a9c05c9281585374eebdfb5_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ef2944c46a9c05c9281585374eebdfb5_JaffaCakes118
-
Size
141KB
-
MD5
ef2944c46a9c05c9281585374eebdfb5
-
SHA1
5b12590793cac840b4eaabb79494683270525b2c
-
SHA256
35dd6221a84bd4cf8e6a805c89e542da72db43e3acf1d849708ffd813a4dcba3
-
SHA512
66728b42b7bd56c5825fa2a2f831ee809133b6226c5ca61b043c11ec12faa1490f9d9a7b1e39a37a8557891f6eb7bfd8efdf261b66ff4e21a5f1bb51b334e3b2
-
SSDEEP
3072:jN4cOuACV6Ju8GWrnacteTNAWRSSioa58yCM/j/s/:jbA0AG+5Vo+pC+A/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef2944c46a9c05c9281585374eebdfb5_JaffaCakes118
Files
-
ef2944c46a9c05c9281585374eebdfb5_JaffaCakes118.exe windows:2 windows x86 arch:x86
ff3615115fe5044bd67fab13ae506418
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
glTranslatef
glTexImage2D
glTexParameteri
glDrawBuffer
wglGetProcAddress
glGenTextures
wglCreateContext
glEnableClientState
glClear
glClearColor
glTexParameterf
glScaled
glVertex3i
glTexCoord2f
glEnd
glPopAttrib
glDisable
glBegin
glShadeModel
glTranslated
glMultMatrixd
glDrawElements
glLoadIdentity
wglDeleteContext
glHint
glEnable
glLightfv
glTexCoordPointer
glBindTexture
glVertexPointer
glViewport
glMatrixMode
glVertex3f
glPushAttrib
glBlendFunc
glPushMatrix
glReadBuffer
glReadPixels
glPopMatrix
wglMakeCurrent
glColorPointer
kernel32
GetCurrentProcess
TerminateProcess
LCMapStringW
LCMapStringA
GetSystemInfo
GetOEMCP
GetACP
GetLocaleInfoA
GetCPInfo
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
SetStdHandle
FlushFileBuffers
VirtualQuery
InterlockedExchange
RtlUnwind
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTickCount
GetModuleHandleA
QueryPerformanceCounter
QueryPerformanceFrequency
MapViewOfFile
UnmapViewOfFile
FreeLibrary
Sleep
CreateFileMappingA
SetConsoleCtrlHandler
CloseHandle
TlsSetValue
SetLastError
TlsAlloc
SetFilePointer
GetLastError
IsBadWritePtr
HeapReAlloc
VirtualFree
HeapCreate
HeapDestroy
DeleteCriticalSection
GetCurrentProcessId
RaiseException
IsBadCodePtr
IsBadReadPtr
FreeEnvironmentStringsA
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
ExitProcess
GetCommandLineA
GetVersionExA
GetProcessHeap
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
VirtualAllocEx
user32
RegisterClassA
ChangeDisplaySettingsA
EnumDisplayDevicesA
LoadCursorA
SetWindowTextA
ShowWindow
DefWindowProcA
CreateWindowExA
ShowCursor
GetDC
GetMonitorInfoA
LoadIconA
PostQuitMessage
EnumDisplayMonitors
DestroyWindow
DispatchMessageA
TranslateMessage
CreateMenu
CreateWindowExW
gdi32
SetPixelFormat
ChoosePixelFormat
GetStockObject
SwapBuffers
cfgmgr32
CM_Get_Device_Interface_List_ExW
CM_First_Range
CM_Get_Hardware_Profile_Info_ExA
CM_Free_Log_Conf_Handle
CM_Query_And_Remove_SubTreeA
CM_Query_Remove_SubTree_Ex
CM_Get_Class_Key_Name_ExA
CM_Connect_MachineW
CM_Set_DevNode_Registry_Property_ExW
CM_Get_HW_Prof_FlagsA
CM_Open_DevNode_Key_Ex
CM_Get_Next_Res_Des_Ex
CM_Add_ID_ExW
CM_Invert_Range_List
CM_Get_Parent_Ex
CMP_WaitNoPendingInstallEvents
CM_Get_Next_Log_Conf_Ex
CM_Get_Child_Ex
CM_Get_DevNode_Registry_Property_ExA
CM_Get_First_Log_Conf
CM_Unregister_Device_InterfaceA
CM_Get_Device_ID_List_Size_ExW
CM_Get_Child
CM_Free_Res_Des
CM_Get_Device_Interface_List_SizeA
CM_Get_Device_ID_Size_Ex
CM_Reenumerate_DevNode_Ex
CM_Request_Eject_PC_Ex
CM_Get_Device_ID_ExW
Sections
.text Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 238KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ