Static task
static1
Behavioral task
behavioral1
Sample
extremeinjectorv3.7.2.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
extremeinjectorv3.7.2.exe
Resource
win10v2004-20240419-en
General
-
Target
0b81444519cda67d6284423f0be1f32d_JaffaCakes118
-
Size
1.3MB
-
MD5
0b81444519cda67d6284423f0be1f32d
-
SHA1
aacd037baf47c4442993f3352841f67ecc4c648a
-
SHA256
ec3a9cf0bbe81e443be8b96449861ceae069199082294c4e6a13ad7bcd9195a5
-
SHA512
a1e14584026f7f9bd8752e4610453cfc18b24c935007af415d67ccc51c8d99a612874e42cbd02d851e40dfdd3a08437c3946df7874f6c0a48214a64d78f9847b
-
SSDEEP
24576:8+Hcj5xT7acdTsF3ery+1aDm22OizHq3BRY1lJ4rasVUsZofZY9o06c0T:86c1xiLq1Ew3fJ4raiMS9oRT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/extremeinjectorv3.7.2.exe
Files
-
0b81444519cda67d6284423f0be1f32d_JaffaCakes118.rar
-
extremeinjectorv3.7.2.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ