Behavioral task
behavioral1
Sample
836fc50404dcf7528084dd16e28aaeef_JaffaCakes118.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
836fc50404dcf7528084dd16e28aaeef_JaffaCakes118.exe
Resource
win10v2004-20240730-en
General
-
Target
836fc50404dcf7528084dd16e28aaeef_JaffaCakes118
-
Size
77KB
-
MD5
836fc50404dcf7528084dd16e28aaeef
-
SHA1
b32e0ec4b2f1165ec2ecf529046f3a98cdbc2f29
-
SHA256
cf11e72806248378520b2d578e30ab8b934000ec3ea508b96e1950a9c3ad05bb
-
SHA512
ba2fb927fc8dcbdbd6ae02bdb2969fa80cc3f06b7869f1860cfea1ef8a8c6af1d31882ca02c28fb1ec30af301477dd71b3bd254010dd9881d29d04f1ee5c0cf2
-
SSDEEP
1536:Iyxv/kfCuxvxcFMdWJOaCm05DaFx/izA3OHQDDAKUybhf63fEPV:Iyxv/kaunWtCm05GFtizA37uybhgEPV
Malware Config
Signatures
-
Njrat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 836fc50404dcf7528084dd16e28aaeef_JaffaCakes118
Files
-
836fc50404dcf7528084dd16e28aaeef_JaffaCakes118.exe windows:4 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 576B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ