Static task
static1
Behavioral task
behavioral1
Sample
Bm6ssTH5I9vTVqF.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
Bm6ssTH5I9vTVqF.exe
Resource
win10v2004-20240709-en
General
-
Target
317cb6e4f1f4545c67f28c3bf7e1dbda_JaffaCakes118
-
Size
468KB
-
MD5
317cb6e4f1f4545c67f28c3bf7e1dbda
-
SHA1
dc061243fa1dbee5ee2c64fd9552e9ac6ed846c4
-
SHA256
b716ebdbe1fc336fb934f879c1d0966c8aa61ac16d52edf1bc687f9bd1d2dfde
-
SHA512
e659ba4fb8a62d330bf9961544a59283c3f59a0130e8fcb4bddb3b1d570fca8181ccd0c6ade5198708af2f1410f436818246a3de54489b230911c585d485bc42
-
SSDEEP
12288:ZSNXeOH/yoGpKbUqq8hwnE8LoWgU8KwmW7LoFok9j/lUb:oNPBMUUqKE88KtWXoSkte
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack002/Bm6ssTH5I9vTVqF.exe
Files
-
317cb6e4f1f4545c67f28c3bf7e1dbda_JaffaCakes118.ace
-
out.ace.ace
-
Bm6ssTH5I9vTVqF.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 523KB - Virtual size: 523KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ