Static task
static1
Behavioral task
behavioral1
Sample
9d70ecfe374efce15ae7055af48ad6fc_JaffaCakes118.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
9d70ecfe374efce15ae7055af48ad6fc_JaffaCakes118.exe
Resource
win10v2004-20240508-en
General
-
Target
9d70ecfe374efce15ae7055af48ad6fc_JaffaCakes118
-
Size
120KB
-
MD5
9d70ecfe374efce15ae7055af48ad6fc
-
SHA1
5e5715a0c2446079f133dbf3bb764ede794f6494
-
SHA256
756a600939ad6af309ab14197ef667cdb23c755b10bd957a71f1089f35fe134a
-
SHA512
5b5f83e81347167114c2a2b5448dc95acd5afea2e2f752f48b47c480e1d2276e214e56b08c57cfe7945c4fa6fb98981fe75eb3701a6b5c9e609f00515424b6e2
-
SSDEEP
3072:y12SAsHG9akBThPFu6wJnpo33ebEvTHM4O:y6NaiFkJnpjbEjM4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9d70ecfe374efce15ae7055af48ad6fc_JaffaCakes118
Files
-
9d70ecfe374efce15ae7055af48ad6fc_JaffaCakes118.exe windows:5 windows x86 arch:x86
cf93d96e784f3ea5a179ef2f27e81edb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
UpdateResourceW
GetProcAddress
lstrcat
lstrcpyW
GetFileSize
MapViewOfFile
LoadLibraryW
CreateFileA
GetModuleHandleA
CopyFileExW
LoadLibraryExW
OpenEventA
CreateMutexA
GetOEMCP
authz
AuthzInitializeContextFromSid
AuthzFreeContext
AuthzAddSidsToContext
AuthzFreeResourceManager
AuthzFreeAuditEvent
user32
InsertMenuW
IsDialogMessageW
GetMessageA
DispatchMessageA
CreateDesktopA
LoadMenuA
DrawStateA
GetDlgItemTextA
GetClassLongW
LoadBitmapW
PostMessageW
cfgmgr32
CM_Add_Empty_Log_Conf
CM_Add_Range
CMP_Report_LogOn
Sections
.text Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
jdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
jdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 87KB - Virtual size: 87KB
IMAGE_SCN_MEM_READ