Static task
static1
Behavioral task
behavioral1
Sample
1nkjH2Sua25O2db.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1nkjH2Sua25O2db.exe
Resource
win10v2004-20240508-en
General
-
Target
a6e823a5b373c89d5b5a0dc239b56bd9_JaffaCakes118
-
Size
1.2MB
-
MD5
a6e823a5b373c89d5b5a0dc239b56bd9
-
SHA1
8f4033702060da3a3bd17c16550adc04e0ca7851
-
SHA256
3d1d3c576e778ffa4f35de33693c32e6802f2a362ec953efaa2ed6c02c7052e5
-
SHA512
d83c1f939c1002ba738ccb0031cddfbffdcad82299b648bbb195c29d05a68c7ff93d1d14108f85d9f2cfaf4412d767e1dd4ba9b24575f540253d27a48dbc0558
-
SSDEEP
12288:BvY2k4zUEBRf8Y0dWvfRNBNaaxwjPZbSTn:BJBREY0SR9RQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/1nkjH2Sua25O2db.exe
Files
-
a6e823a5b373c89d5b5a0dc239b56bd9_JaffaCakes118.iso
-
out.iso.iso
-
1nkjH2Sua25O2db.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 468KB - Virtual size: 467KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ