Behavioral task
behavioral1
Sample
sxsy pron shakiragbj.scr
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
sxsy pron shakiragbj.scr
Resource
win10v2004-20240226-en
General
-
Target
2651dce88f6cf44eb5a8a05f36d2bd9d_JaffaCakes118
-
Size
36KB
-
MD5
2651dce88f6cf44eb5a8a05f36d2bd9d
-
SHA1
51c752ff36928cd414ae50a9f8e800cd9fb61003
-
SHA256
1dd388648d11ab1eccb35a5ec1bacb53cc9411ffeff25c47a290de03e5385da6
-
SHA512
38e74b5709d81bfc9690461909a057c62f45729fec3993dc98156d7f6ba2d6424573949ce701e7624e4c70b18a2b5eebfd9090d26eacc60dbd39fcc5c1e96f2c
-
SSDEEP
768:0wdtJIH0Cjs1+mSUJJjBrA42hDopC74wXbKBjKzkndxlw+MHAoKOf6g:0IzyJQ1+mSUJJjBrP2qpvOKBjgknXWXZ
Malware Config
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/sxsy pron shakiragbj.Scr
Files
-
2651dce88f6cf44eb5a8a05f36d2bd9d_JaffaCakes118.rar
-
sxsy pron shakiragbj.Scr.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ