Static task
static1
Behavioral task
behavioral1
Sample
St raphael juillet 2010.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
St raphael juillet 2010.exe
Resource
win10v2004-20240508-en
General
-
Target
6559fd03b863e412fca9c2e9e89ba59a_JaffaCakes118
-
Size
32KB
-
MD5
6559fd03b863e412fca9c2e9e89ba59a
-
SHA1
7892eb3c8569b788c46666d330d406f982e4fd1b
-
SHA256
d4305e316f514f695057e32626778d9304fb2e3d7dff73ac40b6020ad60eb7f4
-
SHA512
23bcc0778632ab3934d72651495fc7def79dbb9165e447155823808c5f56ff7d60ad151ab0610f4a72c293b2ee16d22e7ef26cddcacf5b4d887fc70b8021ab6a
-
SSDEEP
768:Mnxo+obLMZ8yrsR2gig+MzlllytIWsIPXTftFSnVYn:+DobLMmyg0gAdD77J
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource unpack001/St raphael juillet 2010.exe
Files
-
6559fd03b863e412fca9c2e9e89ba59a_JaffaCakes118.zip
Password: infected
-
St raphael juillet 2010.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
EAH Size: - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
�uۊ�� Size: 41KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE