Behavioral task
behavioral1
Sample
717185d0155273e35ef0c3e4209b7d22_JaffaCakes118.exe
Resource
win7-20240221-en
General
-
Target
717185d0155273e35ef0c3e4209b7d22_JaffaCakes118
-
Size
23KB
-
MD5
717185d0155273e35ef0c3e4209b7d22
-
SHA1
a8f366a2d23c645d9c375fa4a6b3a4a225017011
-
SHA256
55ab4a25ebc82efbfeaafd3ca704df8e5b1e14596fe1316f90169b7319a8eb13
-
SHA512
6985889f84719addf771cec7ce5d32d014da3793a23ba72859766ecbc2d5c97540dfe0c9000977cae0255e4cc48256b64ed8dab365b58c5e88f5b73332c15cc8
-
SSDEEP
384:BM8aSyS9gB3Y1KIay2X8cLZI6XgxsGJVPpmRvR6JZlbw8hqIusZzZD7:Z589tXvRpcnuY
Malware Config
Extracted
njrat
0.7d
HacKed
youtubexlarg.ddns.net:1177
ff7ceee5cac2d72ae5f91f7ee0db1afb
-
reg_key
ff7ceee5cac2d72ae5f91f7ee0db1afb
-
splitter
|'|'|
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 717185d0155273e35ef0c3e4209b7d22_JaffaCakes118
Files
-
717185d0155273e35ef0c3e4209b7d22_JaffaCakes118.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ