Static task
static1
Behavioral task
behavioral1
Sample
ff240e51e0728f9263e7ee0dc75b83c1_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ff240e51e0728f9263e7ee0dc75b83c1_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
ff240e51e0728f9263e7ee0dc75b83c1_JaffaCakes118
-
Size
37KB
-
MD5
ff240e51e0728f9263e7ee0dc75b83c1
-
SHA1
dacc7c7498ab3a2d6f45f7d03a8cdf67e3cd4622
-
SHA256
a97ae75eb2a33e23618822b62d2b403771c0e12db90e9bf4e9ac18baec430449
-
SHA512
28ca6b0aa77594f6d57760c58f2958954ef54e87f04e0c2db12b2c82c8abb35ecfd46fbd5739d691668ddba30880c45867edefee37b89d200dcc9a8e08f8a7b6
-
SSDEEP
384:s3ViqNlsiumPjAB0C9md/IH6s8gJON1eVNosr8ylkLKYiKa1qx73zfMPX+V:WViqNlsiu/iCAiON1eVNDr8E05
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ff240e51e0728f9263e7ee0dc75b83c1_JaffaCakes118
Files
-
ff240e51e0728f9263e7ee0dc75b83c1_JaffaCakes118.exe windows:4 windows x86 arch:x86
a94d5c5feea295099f24be7d48517239
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
glut32
__glutInitWithExit
__glutCreateWindowWithExit
__glutCreateMenuWithExit
glutPostRedisplay
glutInitDisplayMode
glutInitWindowPosition
glutInitWindowSize
glutDisplayFunc
glutReshapeFunc
glutSpecialFunc
glutKeyboardFunc
glutMainLoop
glu32
gluOrtho2D
kernel32
AddAtomA
ExitProcess
FindAtomA
GetAtomNameA
GetModuleHandleA
GetProcAddress
SetUnhandledExceptionFilter
VirtualProtect
VirtualQuery
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
exit
free
malloc
memcpy
printf
signal
opengl32
glBegin
glClear
glClearColor
glColor3f
glEnd
glFlush
glLineWidth
glLoadIdentity
glMatrixMode
glPointSize
glPopMatrix
glPushMatrix
glRotatef
glScalef
glTranslatef
glVertex2f
glVertex2i
glViewport
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 20B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 736B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 104B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
/4 Size: 512B - Virtual size: 64B
IMAGE_SCN_MEM_DISCARDABLE
/19 Size: 512B - Virtual size: 340B
IMAGE_SCN_MEM_DISCARDABLE
/35 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_MEM_DISCARDABLE
/47 Size: 1024B - Virtual size: 962B
IMAGE_SCN_MEM_DISCARDABLE
/61 Size: 1024B - Virtual size: 944B
IMAGE_SCN_MEM_DISCARDABLE
/73 Size: 512B - Virtual size: 448B
IMAGE_SCN_MEM_DISCARDABLE
/86 Size: 1024B - Virtual size: 881B
IMAGE_SCN_MEM_DISCARDABLE
/97 Size: 512B - Virtual size: 24B
IMAGE_SCN_MEM_DISCARDABLE