Behavioral task
behavioral1
Sample
ed00be1233d9664b5a48735de94df46e_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ed00be1233d9664b5a48735de94df46e_JaffaCakes118.exe
Resource
win10v2004-20231215-en
General
-
Target
ed00be1233d9664b5a48735de94df46e_JaffaCakes118
-
Size
74KB
-
MD5
ed00be1233d9664b5a48735de94df46e
-
SHA1
b69dde6bdf5f4e1f4e18c093b8330baff75c46a3
-
SHA256
13242c1a960fc2734b9327f6da3906b4502c724aa3a7d1b499ad01ee05b4e8fa
-
SHA512
0eb95d751f31a3e3971f256c32e8c74f51aa570f602684c26d454b59b6a580ae2552d820a4a22e1941fdeee5f889283e177fe9c93f426afb9435b9ee800524e2
-
SSDEEP
768:+Y3IUgYCeUXVbchQHqqAp+G9hyXBa2+V0WWXxrjEtCdnl2pi1Rz4Rkm:SUhCeUl/qqAp99qmVgjEwzGi1dDm
Malware Config
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ed00be1233d9664b5a48735de94df46e_JaffaCakes118
Files
-
ed00be1233d9664b5a48735de94df46e_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ