Static task
static1
Behavioral task
behavioral1
Sample
4082d4c68e989a115d6d61a6cfbc8baf_JaffaCakes118.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
4082d4c68e989a115d6d61a6cfbc8baf_JaffaCakes118.exe
Resource
win10v2004-20241007-en
General
-
Target
4082d4c68e989a115d6d61a6cfbc8baf_JaffaCakes118
-
Size
734KB
-
MD5
4082d4c68e989a115d6d61a6cfbc8baf
-
SHA1
7eda84b800d1f43e41b1ebc2c1ecec180b97e541
-
SHA256
e633f96ee76f252b5ec5d94d871da5974e4bccb560ad2e1e4a5e19123bb5f8b3
-
SHA512
ee1435605026ea069db57ab299c6a712518f3dafe1fa5d421a17e5b359d037bdf460c06b459556c051270b53f303e4f52bc7ee709195d048afff52688d26c6f6
-
SSDEEP
12288:IGWbIekxJrm06d8/2T/bher9U+aUIHrQiPPQmfe6JUgoF+rNy2a3z1YoFnX1v5Z:IVOrYT/bhM2+HtiXwma3zeoJJ5Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4082d4c68e989a115d6d61a6cfbc8baf_JaffaCakes118
Files
-
4082d4c68e989a115d6d61a6cfbc8baf_JaffaCakes118.exe windows:5 windows x86 arch:x86
663990991728def7ca99683d0093f6ff
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EnumDisplayMonitors
advapi32
RegOverridePredefKey
shell32
SHCreateProcessAsUserW
Sections
ewecf Size: - Virtual size: 916KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ewecf Size: 734KB - Virtual size: 736KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE