Behavioral task
behavioral1
Sample
d2eaaa542a2968b2a9ebe288166779e8_JaffaCakes118.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
d2eaaa542a2968b2a9ebe288166779e8_JaffaCakes118.exe
Resource
win10v2004-20240226-en
General
-
Target
d2eaaa542a2968b2a9ebe288166779e8_JaffaCakes118
-
Size
63KB
-
MD5
d2eaaa542a2968b2a9ebe288166779e8
-
SHA1
37bcd26dcd35f9dd16bd8aff7cad425f3898309c
-
SHA256
f605ba8fe94eb367829b61cd05eb5b07f4702b55f2a0faf51589cb46dd6f89a9
-
SHA512
059a1aed6e654fb4465e11f7a0687ac4e6ec0bc17f4ca2726f1bf4f069c1c757b3577d0dd3e5f5b31cfd9e7c0750ffd2880da31053f5ad8f258227029df3e89a
-
SSDEEP
768:7KpPFoHQ5H2YScYeFevyJrkcvPhOS4/Vi3xnehErtX+GsM4:7Ed5HJScYe+QzPhOvVihneW9+N
Malware Config
Extracted
purecrypter
https://store2.gofile.io/download/d457f6f3-9301-4ee3-8492-c3d74098cf83/Tbibzbhpin.dll
Signatures
-
Purecrypter family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2eaaa542a2968b2a9ebe288166779e8_JaffaCakes118
Files
-
d2eaaa542a2968b2a9ebe288166779e8_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ